Introduction to GitHub Actions
Automate repository workflows, CI/CD, and security with GitHub Actions. Learn to set up workflows, integrate with Package Registry, and create custom actions for enhanced productivity.
Libmpk - Software Abstraction for Intel Memory Protection Keys
Explore libmpk, a software abstraction enhancing Intel MPK's security and scalability. Learn about its implementation, benefits, and applications in OpenSSL, JavaScript JIT, and Memcached.
FragAttacks - Breaking Wi-Fi through Fragmentation and Aggregation
Explore Wi-Fi vulnerabilities, including design and implementation flaws, and learn how attackers can exploit them for packet injection and data exfiltration in networks.
Enter Sandbox
Explore automated seccomp filter generation for Linux applications, enhancing security through sandboxing and system call restrictions without manual developer intervention.
How to Hack Medical Imaging Applications via DICOM
Explore critical security vulnerabilities in DICOM servers, protocols, and libraries used in medical imaging systems. Learn to identify and fix bugs in the DICOM ecosystem.
Hacking Medical Devices and Healthcare Infrastructure
Explore healthcare cybersecurity, focusing on HL7 protocol vulnerabilities in medical devices and hospital systems. Learn to identify and exploit weaknesses in healthcare infrastructure.
A New RISC
Exploring RISC-V: A new open-source processor architecture, its security attributes, potential vulnerabilities, and impact on computing platforms. Includes demonstrations of attacks and discussions on privilege models and future implications.
Where 2 Worlds Collide - Bringing Mimikatz et al to UNIX
Explore techniques for attacking Active Directory forests from UNIX systems integrated with AD, examining tools and procedures that bridge these two worlds in cybersecurity.
The Subtle Art of Chaining Headers - IKEv2 Attack Surface Case Study
Explore IKEv2 attack surface through header chaining, uncovering vulnerabilities in IPsec VPNs. Learn techniques for identifying and exploiting weaknesses in Internet Key Exchange implementations.
Do You Speak My Language? Make Static Analysis Engines Understand Each Other
Explore a novel framework for cross-language taint-flow analysis, enabling detection of critical security vulnerabilities across multiple codebases and programming languages.
Uncovering Planned Obsolescence Practices in Robotics and What This Means for Cybersecurity
Explore systematic "robot teardown" to understand and repair robots, uncovering planned obsolescence practices and their implications for cybersecurity in robotics.
Breaking Access Controls With BLEKey
Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.
Charge Your Device with the Latest Malware
Exposición de vulnerabilidades USB en sistemas Android personalizados, con demostración de ataque y escenario práctico, revelando implicaciones y logrando acceso root.
Exploring Yosemite - Abusing Mac OS X 10.10
Comprehensive analysis of Mac OS X 10.10 Yosemite's security features, demonstrating vulnerabilities, offensive techniques, and introducing a new security tool for detecting rootkits and abnormalities.
Bypassing Local Windows Authentication to Defeat Full Disk Encryption
Exploit bypasses Windows authentication and BitLocker encryption, allowing unauthorized access to sensitive data on encrypted disks without cryptographic brute-forcing or hardware manipulation.
ZigBee Exploited - The Good, The Bad, And The Ugly
Explore ZigBee's security vulnerabilities in IoT devices, focusing on smart home applications. Learn about weaknesses, practical exploits, and a new security-testing framework for this widespread communication standard.
Fingerprints on Mobile Devices - Abusing and Leaking
Explore vulnerabilities in mobile fingerprint authentication, including authorization attacks, sensor spying, and backdoors. Learn to secure fingerprints and mitigate risks in this eye-opening analysis.
The Nightmare Behind the Cross Platform Mobile Apps Dream
Explore security vulnerabilities in popular cross-platform mobile development frameworks and their implications for app developers and users.
Addressing Complete Security to Save Money
Explore comprehensive Windows security strategies to reduce costs and enhance protection in this insightful presentation on addressing vulnerabilities and implementing effective safeguards.
Blindspots
Robert Hansen shares insights on overlooked areas in web application and browser security, challenging industry professionals to broaden their thinking and address critical blindspots.
AntiFreeze Hamburger17 - The Safety You Think You Have is Only a Masquerade
Explore cybersecurity illusions and hidden vulnerabilities in systems. Uncover the reality behind perceived safety measures and learn to identify potential security weaknesses.