Blue Pill for Your Phone
Exploración de vulnerabilidades en hipervisores y TrustZone de teléfonos ARM modernos, analizando vectores de ataque y métodos para elevar privilegios. Incluye lanzamiento de soporte ARM para CHIPSEC.
Dispositivos Inteligentes, ¿Decisiones Inteligentes?
Análisis de seguridad en dispositivos inteligentes: riesgos, vulnerabilidades y decisiones informadas para proteger la privacidad y datos personales en el ecosistema IoT.
Mobile Hacking - iOS App Analysis, ¿por dónde empiezo?
Análisis de aplicaciones iOS: metodología, herramientas y técnicas para principiantes en hacking móvil. Enfoque práctico para iniciar en seguridad de apps Apple.
Tu Propia Emisora de Números Espía - Radio Space
Explora la creación de emisoras de números y técnicas de exfiltración de datos con Simon Roses Femerling, experto en ciberseguridad y fundador de VULNEX. Descubre los secretos de las comunicaciones encubiertas.
Why I Write My Own Security Tooling and Why You Should Too
Discover the benefits of creating custom security tools for research. Learn how this approach enhances understanding, improves vulnerability detection, and ultimately makes you a more effective security researcher.
KTRW - The Journey to Build a Debuggable iPhone
Explore the process of creating a debuggable iPhone using off-the-shelf devices, breaking KTRR, and enabling kernel debugging with LLDB on production iPhones.
Mehr schlecht als Recht - Grauzone Sicherheitsforschung
Rechtliche Herausforderungen und Grauzonen bei der IT-Sicherheitsforschung: Ein Erfahrungsbericht über Reverse Engineering, Urheberrechtsfragen und den Umgang mit Herstellern bei der Aufdeckung von Schwachstellen.
Abusing Security Products to Bypass Windows Protections
Unveiling critical vulnerabilities in security products that allow bypassing Windows protections. Explores impact, solutions, and provides a validation tool for system security.
Bootstrapping an Architectural Research Platform
Explore x86 architecture for security research: privileges, events, hypervisors, and emerging tech. Gain foundational knowledge to streamline your research setup and focus on key questions.
Aviation Security 101
Explore aviation security vulnerabilities through pen testing research, covering access risks, performance calculations, maintenance mode issues, and potential misunderstandings in the industry.
In Soviet Russia, Vulnerability Finds You - DefCamp - 2017
Exploración de vulnerabilidades de seguridad en sistemas cotidianos, desde cámaras de vigilancia hasta tarjetas de fidelización, revelando riesgos y estrategias de ataque en diversos contextos tecnológicos.
From Hype Hangover to Happy Hacking - Shaping the World through Shaping Actions - DefCamp 2015
Explore hacking's impact on shaping actions, from hype to practical applications. Gain insights into cybersecurity challenges, collaborations, and the future of information security.
Vulnerability Disclosure, Governments and You
Explore vulnerability disclosure's evolution, its impact on policy-making, and the role of governments. Learn about bug bounties, legal considerations, and international efforts in cybersecurity.
Sigma - Generic Signatures for Log Events
Explore generic signatures for log events with Sigma, a YAML-based format for sharing and converting log signatures across different SIEM systems and query languages.
Bootstrapping an Architectural Research Platform
Explore x86 architecture research, covering CPU privileges, hypervisors, and emerging technologies. Learn to focus on research questions by understanding fundamental architectural concepts.
Exploitation of a Hardened MSP430-Based Device - Braden Thomas - Ekoparty Security Conference - 2014
Reverse-engineering and exploiting a hardened MSP430 device: techniques for firmware extraction, analysis, and data retrieval from RAM, with focus on overcoming JTAG security measures.
Security Papers - IEEE VR 2022
Explore cutting-edge VR security research, including shoulder surfing, authentication, biometrics, and keylogging inference attacks in virtual and mixed reality environments.
You Won't Even Know It's Recording You
Explore mobile app analytics tools, their data collection practices, and privacy implications. Learn techniques to identify session replay capabilities and device fingerprinting methods in iOS and Android apps.
Windows Notification Facility - Peeling the Onion of the Most Undocumented Kernel Attack Surface Yet
Explore the undocumented Windows Notification Facility, its architecture, and potential security implications. Learn about state names, data publishing, and consuming, as well as attack vectors and defensive strategies.
An Azure Sphere Security Breakdown
Explore Azure Sphere IoT security features, vulnerabilities discovered during Microsoft's research challenge, and a privilege escalation chain for acquiring Azure Sphere Capabilities.
Coordinated Vulnerability Disclosure - You’ve Come a Long Way, Baby
Explore new research on coordinated vulnerability disclosure, examining perspectives of researchers and organizations to understand behaviors, preferences, and practices in software flaw reporting.