You Are Being Watched
Explore the vulnerabilities of phone systems and network storage devices, uncovering security flaws and potential exploits in administrative interfaces and user access.
The Savage Curtain
Explore SSL certificate validation, CA testing, and session caching. Learn key aspects of cybersecurity through Star Trek-themed modules for enhanced understanding and practical application.
BaRMIe - Poking Java’s Back Door
Explore Java's Remote Method Invocation security vulnerabilities, enumeration techniques, and exploitation tools with BaRMIe. Learn about common mistakes and potential solutions in RMI implementations.
Secrets Of The Motherboard - Shit My Chipset Says
Explore motherboard intricacies, security features, and hidden functionalities. Uncover potential exploits, design pitfalls, and challenges in hardware security through chipset analysis and datasheet discoveries.
Bug Bounty Programs - Successfully Controlling Complexity and Perpetual Temptation
Explore bug bounty programs with industry experts, covering implementation strategies, legal considerations, and best practices for effective vulnerability management and researcher collaboration.
Struts 2 Must Die - The Life and Inevitable Death of Java’s Spaghettiest Framework
Explore Struts 2's evolution from modern framework to security liability. Dive into OGNL vulnerabilities, architectural flaws, and exploit techniques. Learn why Struts 2 persists in production and its potential for massive damage.
The Great Escape of ESXi
Detailed analysis of VMware ESXi vulnerabilities, demonstrating a full chain escape from a sandboxed virtual machine to the host system on ESXi 6.7.
Messenger Hacking- Remotely Compromising an iPhone through iMessage - Deutsche Übersetzung
Detaillierte Einblicke in die Ausnutzung einer iMessage-Sicherheitslücke zur Kompromittierung von iPhones ohne Nutzerinteraktion. Beleuchtet Techniken, Gegenmaßnahmen und Empfehlungen für verbesserte mobile Sicherheit.
Hacking the Hacker - The Story - DefCamp - 2019
Explore the journey of hacking a Honda vehicle, from initial assumptions to uncovering vulnerabilities. Learn about tools, techniques, and insights gained during this ethical hacking process.
What the Wi-Fi Cactus - DefCamp - 2017
Explore WiFi monitoring with the WiFiCactus project: innovative hardware, data analysis, and security implications in this DefCamp 2017 presentation.
Compromise-as-a-Service - Our PleAZURE
Explore cloud security vulnerabilities in Hyper-V, including hypervisor attacks, virtual air gaps, and debugging techniques for identifying and exploiting potential weaknesses.
The Wolf in SGX Clothing
Explore Intel SGX's security features, requirements, and potential vulnerabilities through demos, code analysis, and practical examples. Gain insights into enclave protection and potential attack vectors.
Vehicle Alarms' Insecurity and Something Else
Explore vulnerabilities in vehicle alarm systems, including signal transmitters, deactivation methods, and remote control weaknesses. Learn about code knocking and motion detector flaws.
Biting into the Forbidden Fruit
Exploring JavaScript cryptography's vulnerabilities, debunking myths, and analyzing real-world implementations to provide an updated perspective on its security challenges and potential solutions.
Fuzzing the Phone in the iPhone
Explore iPhone baseband security through fuzzing, revealing vulnerabilities in iOS-baseband interface. Discover unexpected effects on device identity, SMS handling, and location services.
Security Vulnerabilities in DVB-C Networks - Rahul Sasi - Ekoparty Security Conference - 2014
Explore security vulnerabilities in DVB-C networks, including middleware server attacks, protocol bugs, and MPEG stream fuzzing. Learn to hijack TV streams and manipulate cable broadcasting systems.
Pose a Threat - How Perceptual Analysis Helps Bug Hunters
Innovative techniques for efficient bug hunting using perceptual analysis, serverless infrastructure, and machine learning to identify security vulnerabilities at scale.
A Comprehensive Formal Security Analysis of OAuth 2.0
Comprehensive formal security analysis of OAuth 2.0, examining authorization, authentication, and session integrity properties, and discussing potential attacks and mitigations.
MDS, Fallout, Zombieland & Linux
Explore recent CPU vulnerabilities, their impact on Linux, and security fixes with kernel developer Greg Kroah-Hartman in this insightful keynote address.
An Azure Sphere Security Breakdown
Explore Azure Sphere IoT security features, vulnerabilities discovered during Microsoft's research challenge, and a privilege escalation chain for acquiring Azure Sphere Capabilities.
The Etiology of Vulnerability Exploitation
Explore the factors influencing vulnerability exploitation through data analysis, challenging conventional scoring systems and offering insights to improve vulnerability management strategies.