IDA2Obj - Static Binary Instrumentation on Steroids
Explore static binary instrumentation with IDA2Obj, a tool for dumping object files from executables. Learn implementation, challenges, and integration with fuzzing engines for efficient code coverage collection.
Is Attestation All We Need? Fooling Apple's AppAttest API
Exploración detallada de la API AppAttest de Apple, sus vulnerabilidades y limitaciones como solución anti-manipulación, con ejemplos de implementaciones débiles y escenarios de bypass.
Can A Fuzzer Match A Human
Exploring advanced fuzzing techniques for Solidity compiler testing, focusing on optimizers and code generators to uncover security vulnerabilities in smart contract compilation.
Fuzzing the MCU of Connected Vehicles for Security and Safety
Fuzzing techniques for MCU security in connected vehicles, using ARM ETM and code coverage-guided approach to enhance vulnerability detection and system robustness.
Sympathy for the Developer
Explore developer challenges and empathetic solutions in cybersecurity, fostering better collaboration between security teams and developers for enhanced software protection.
Guardians of GitHub
Explore GitHub security practices and learn to protect your repositories from common vulnerabilities with insights from industry experts.
Solving for Somebody Else's Problem - Hacking Devs for Better Security
Explore strategies for improving security by understanding and addressing developers' challenges, fostering collaboration between security and development teams.
Burpsuite Team Collaborator - Enabling Collaborative App Testing
Explore collaborative app testing with Burpsuite Team Collaborator. Learn features, sharing capabilities, and see a live demo for enhanced security assessments and teamwork.
The Case for Software Bill of Materials
Explore the importance of Software Bill of Materials in cybersecurity, its implementation challenges, and potential benefits for software transparency and risk management.
Repo Jacking - How GitHub Exposes Over 70,000 Projects to Remote Code Injection
Explore how GitHub's vulnerability exposes thousands of projects to remote code injection, uncovering potential security risks and implications for developers and organizations.
Virtual Breakpoints for x86/64
Explore virtual breakpoints for x86/64 architectures, enhancing debugging capabilities and gaining deeper insights into system behavior and software execution.
CICD Security - A New Eldorado
Explore CI/CD security challenges and opportunities in this talk, covering potential vulnerabilities, attack vectors, and best practices for securing development pipelines.
SBOM Challenges and How to Fix Them
Explore challenges in Software Bill of Materials (SBOM) and discover effective solutions for improved software security and transparency.
You're Just Complaining Because You're Guilty - A Guide for Citizens and Hackers to Adversarial Testing of Software Used in the Criminal Justice System
Explore adversarial testing of criminal justice software, empowering citizens and hackers to challenge and verify systems that impact lives and liberty.
The New Cat and Mouse Game - Attacking and Defending Machine Learning Based Software
Explore techniques for attacking and defending machine learning-based software, including practical demonstrations and insights from academic literature.
Watching the Watchers - Exploiting Vulnerable Monitoring Solutions
Explore vulnerabilities in monitoring solutions and learn techniques to exploit them, enhancing your cybersecurity skills and understanding of potential risks in surveillance systems.
DIY Static Code Analyzer - Building Your Own Security Tools with Joern
Learn to build custom security tools using Joern for static code analysis, enhancing your ability to detect vulnerabilities and improve software security.
Introduction to Fuzzing
Explore the fundamentals of fuzzing, a powerful software testing technique, in this comprehensive workshop led by expert Dhiraj Mishra.
Call Center Authentication
Explore secure customer identity management in call centers, focusing on authentication methods, challenges, and best practices for protecting sensitive information.
Secure Programming for Embedded Systems
Explore cryptographic techniques and best practices for secure programming in embedded systems with expert Thomas Pornin, author of BearSSL library.
Logic Against Sneak Obfuscated Malware
Explore SMT solvers for binary analysis and code deobfuscation in IT security. Learn practical applications, limitations, and solutions for enhancing malware analysis capabilities.