ChatGPT for Cybersecurity
Explore ChatGPT's applications in cybersecurity, from pentesting and shell generation to blue team strategies. Learn to leverage AI for enhanced security practices and automation.
Browser Exploitation - Max Zinkus
Explore JavaScript-based browser exploitation techniques, including XSS, JIT compilation vulnerabilities, and shellcode execution. Learn about browser security measures and how to find and chain exploits.
Secret Pentesting Techniques - 10 Advanced Methods
Discover advanced pentesting techniques, from binary droppers to egress busting, with insights on encryption, shellcode injection, and firewall bypassing for enhanced security assessments.
Fuzzing - Finding Your Own Bugs and 0days
Aprende técnicas de fuzzing para descubrir vulnerabilidades y exploits de día cero. Incluye demostraciones prácticas de Buffer Overflow y creación de shellcode para pruebas de penetración.
A New Secret Stash For Fileless Malware
Explores advanced fileless malware techniques using Windows event logs for code hiding and infection. Reveals new methods to conceal shellcode and manipulate logging functions.
ARM Assembly and Shellcode Basics - Workshop
Comprehensive workshop on ARM assembly and shellcode creation, covering basics, execve() shell, and reverse shell. Includes hands-on practice with QEMU emulator and Raspberry Pi hardware.
Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet
Explore remote code execution vulnerabilities in physical security systems, learning to exploit and disarm alarms through reverse engineering and network protocol analysis.
Universal Android Rooting Is Back
Explore universal Android rooting through kernel exploitation, focusing on a Use-After-Free bug affecting all Linux versions. Learn about innovative techniques for 64-bit devices and bypassing modern kernel mitigations.
Syscalls in Shellcode - Techniques for Malicious Functionality
Explore advanced techniques for using Windows syscalls in shellcode, overcoming portability issues, and enhancing malicious functionality. Learn about ShellWasp tool and novel WoW64 syscall invocation methods for stealthy code execution.
Easy Ways to Bypass Anti Virus Systems
Discover simple techniques to evade antivirus systems, including signature detection, emulation, sandboxing, and firewalls. Learn how attackers can bypass popular security measures with minimal effort and resources.
State of Web Exploit Toolkits
Deep dive into popular web exploit toolkits, analyzing construction, shellcodes, obfuscations, and exploits. Explore trends, data harvesting methods, and emerging players in cybercriminal landscape.
PDF Attack - A Journey From the Exploit Kit to the Shellcode Part 1
Explore the intricacies of PDF-based attacks, from exploit kits to shellcode execution, in this comprehensive cybersecurity analysis by Jose Miguel Esparza.
PDF Attack - A Journey From the Exploit Kit to the Shellcode Part 2
Explore advanced PDF exploitation techniques, from exploit kits to shellcode execution, with expert insights on vulnerabilities and attack vectors.
Secrets of DNS
Explore DNS vulnerabilities, including cross-site scripting, SQL injection, and DNS rebinding. Learn about traffic forwarding, shellcode, and detection techniques in this security-focused talk.
Shellcode Time - Come on Grab Your Friends - Wartortell
Explore shellcode creation techniques, from assembly basics to advanced concepts like modular payloads and JSON objects, enhancing your understanding of low-level programming and security.
Metasploit Fuzzing and Exploit Development
Learn advanced Metasploit techniques for fuzzing and exploit development, covering overflows, stack manipulation, and shellcode creation. Gain practical skills inspired by Derbycon's founding.
Waiter, There's a Compiler in My Shellcode
Learn advanced techniques for creating and optimizing shellcode, including using compilers and assembly language to craft efficient and stealthy payloads for security research and penetration testing.
The Anatomy of an Exploit
Explore exploit development through C and x86_64 assembly, gaining insights into security vulnerabilities and the attacker's perspective for more secure coding practices.
Black Hat Europe 2023
Black Hat Europe 2023
Black Hat USA 2023
Black Hat USA 2023
Black Hat Europe 2022
Black Hat Europe 2022