Hacking BLE Fitness Trackers: Security Vulnerabilities and Attack Techniques
Explore BLE hacking techniques for fitness trackers, including reverse engineering, information gathering, and potential attacks. Learn about vulnerabilities in smart devices.
Not So Random - Exploring Randomness in Cybersecurity
Explore cryptographic vulnerabilities in random number generators and their impact on security systems. Learn detection methods and mitigation strategies.
Practical Attacks
Explore cutting-edge research on practical cryptographic attacks presented at Eurocrypt 2024, featuring insights from leading experts in the field of information security.
String Solving for Verification - TutorialFest at POPL 2024
Explore string solving techniques for software verification, focusing on theory, implementations, and applications in programming languages and security analysis.
Attacking Fast Charging Electric Vehicles
Análisis de seguridad en protocolos de carga rápida para vehículos eléctricos, incluyendo vulnerabilidades y ataques potenciales usando la herramienta "XCharger" para pruebas y explotación.
Solving for Somebody Else's Problem - Hacking Devs for Better Security
Explore strategies for improving security by understanding and addressing developers' challenges, fostering collaboration between security and development teams.
Climbing the Production Mountain - Practical CI/CD Attacks Using CI/CD Goat
Explore practical CI/CD attacks using CI/CD Goat, a hands-on approach to understanding and mitigating vulnerabilities in continuous integration and deployment pipelines.
You're Just Complaining Because You're Guilty - A Guide for Citizens and Hackers to Adversarial Testing of Software Used in the Criminal Justice System
Explore adversarial testing of criminal justice software, empowering citizens and hackers to challenge and verify systems that impact lives and liberty.
Knock Knock. Who's There? Betta! Betta Who? Betta Check Your Access Control Edge Devices
Explore vulnerabilities in access control edge devices and learn how to secure them against potential breaches in this eye-opening cybersecurity presentation.
dRuby Security Internals
Comprehensive analysis of dRuby's security vulnerabilities, exploring its API, internals, and wire protocol. Demonstrates novel exploitation techniques and discusses efforts to harden dRuby against identified issues.
Cache Me If You Can - Messing with Web Caching
Explore web caching vulnerabilities and attacks, including Edge Side Include Injection, with insights from a seasoned security consultant and CTF participant.
Hide Yo' Kids - Hacking Your Family's Connected Things
Explore vulnerabilities in IoT devices for children, including baby monitors and GPS trackers. Learn research techniques like mobile reverse engineering and network analysis to enhance IoT security.
How -in-secure is Windows Defender – Let’s Bypass Together
Explore Windows Defender vulnerabilities and bypass techniques in this cybersecurity presentation. Learn about potential weaknesses and strategies to enhance system protection.
Living Off the Walled Garden
Explore Windows security vulnerabilities in ELAM and PPL, revealing how overly-permissive rules can be exploited for malware protection and code execution, hampering detection efforts.
OopsSec - The Bad, the Worst, and the Ugly of APT
Unveiling critical mistakes in APT campaigns across global threat actors, revealing advanced TTPs, and exploring real-time monitoring of sophisticated attacks. Insights on improving organizational defense against evolving threats.
Security Alarm System - Feeling of Security or Cause for Alarm
Explore vulnerabilities in home security alarm systems, including PIN code sniffing, keypad emulation, and RF attacks. Learn about firmware reverse engineering and its implications for system security.
Hack the Source - Securing OSS – One Bug At A Time
Insights into securing open source software through HackerOne programs and Internet Bug Bounty. Learn approaches for targeting OSS, reporting processes, and recent interesting bug discoveries.
Security Through Obscurity and Fear
Explore mobile app security flaws in government-developed applications, uncovering overlooked vulnerabilities and their potential impacts on user privacy and data protection.
Increasing Your Impact on Facebook Bug Bounty
Discover strategies to maximize your impact on Facebook's Bug Bounty program from a Security Engineer's perspective, focusing on effective bug submission and program insights.
Hacking Medical Devices and Infrastructure
Explore vulnerabilities in HL7 2.x healthcare messaging standard, common implementation flaws, and attack techniques. Learn about a tool for quick analysis and testing of medical device security.
Hacking Automatically - Applying Program Analysis to IoT
Discover how program analysis can uncover vulnerabilities in IoT devices. Learn about firmware analysis challenges, memory corruption patterns, and see 20 real-world examples of security flaws identified through automated techniques.