Secrets of the Source
Explore source code analysis techniques with industry experts, uncovering insights to enhance software quality and development practices.
Windows Has a Major IPv6 Problem - Patch Tuesday Security Update
Explore a critical IPv6 vulnerability in Windows, its implications for system security, and the importance of timely patching in today's cybersecurity landscape.
Defensive Coding Bootcamp - NDC Melbourne
Learn essential security practices to build robust, hack-resistant software. Explore vulnerabilities, evasive coding techniques, and fundamental principles applicable across programming languages for developers of all levels.
Scaling the Security Researcher to Eliminate OSS Vulnerabilities Once and For All
Explore automated security vulnerability detection and fixing in open-source software, including techniques like OpenRewrite and control flow analysis for efficient, large-scale remediation.
Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE
Explore Kerberos delegation vulnerabilities in Windows networks, learning techniques for unauthorized impersonation and remote code execution. Gain insights into potential security risks and mitigation strategies.
Don't Panic - A Developer's Guide to Building Secure GraphQL APIs
Explore secure GraphQL API design through case studies, OWASP risks, and proactive threat planning. Learn about unique challenges and security risks compared to other API standards.
Docker Security
Explore Docker container security concerns and solutions in this informative talk. Learn about potential vulnerabilities, best practices, and strategies to enhance the security of your containerized applications.
How to Get Properly Hacked
Live-coding session exploring common software development mistakes that lead to security vulnerabilities. Discover how to identify and prevent these issues to enhance application security.
Why We Hate Java Serialization and What We're Doing About It
Explores Java Serialization's flaws, security risks, and obsolescence. Analyzes design issues, presents examples of resulting bugs, and discusses potential replacements that integrate better with the language model and enhance code clarity.
Keep Your Dependencies in Check
Explore tools and strategies for efficiently managing and updating dependencies in software projects, balancing security needs with continuous delivery of business value.
How I Learned to Stop Worrying and Love the Smart Meter
Explore smart meter vulnerabilities, AMI systems, and Zigbee security. Learn attack vectors, access methods, and common security issues in utility infrastructure.
Defensive Coding Bootcamp
Learn essential security practices and defensive coding techniques to build more secure software across all programming languages.
Abusing Windows Hello Authentication Without Biometric Data
Delve into Windows Hello's security vulnerabilities and authentication mechanisms, exploring attack vectors and hardware protection bypasses for biometric authentication without physical compromise.
Security Vulnerabilities in ZK-SNARKs and Their Application in ZK-Rollups
Explore critical security vulnerabilities in zk SNARK systems and their implications for zk rollups, focusing on systematic analysis and potential mitigation strategies in blockchain scaling solutions.
Private Keys in Public Places - Finding and Exploiting Hidden Encryption Keys
Uncover techniques for finding hidden private keys, certificates, and encryption keys in firmware, with real-world examples from Netgear, Fortinet, and Dell's security vulnerabilities.
Breaking into Secure Facilities with OSDP - Vulnerabilities and Exploitation Techniques
Uncover critical vulnerabilities in OSDP security protocols and learn practical exploitation techniques for bypassing encrypted RFID systems through demonstrated pentesting tools and methodologies.
A SSLippery Slope - Unraveling Hidden Dangers of Certificate Misuse
Uncover critical vulnerabilities in digital signature validation systems and learn how attackers can exploit certificate misuse to bypass security measures for signing untrusted code.
NTLM Authentication Vulnerabilities and Exploits - A Final Analysis
Dive into critical NTLM authentication vulnerabilities, exploring new bugs, bypass techniques, and security control gaps in Windows systems before Microsoft phases out this protocol.
Finding and Exploiting Local Security Vulnerabilities in 1Password for MacOS
Explore critical security vulnerabilities in 1Password's MacOS app, including local vault exploitation, IPC weaknesses, and Chrome extension flaws that could compromise password security.
Top War Stories from Bug Bounty Hunting - High-Severity Exploits and Discoveries
Dive into real-world bug bounty hunting experiences, exploring high-severity vulnerabilities worth $10k-$60k, from simple RCE exploits to complex PII leakages, with detailed technical insights and lessons learned.
Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls
Discover techniques for exploiting email address parsing vulnerabilities to bypass security controls, spoof domains, and access protected systems through RFC-compliant manipulation.