COMpromise - Remote Code Execution in Windows Development Environments
Explore how viewing untrusted code in Windows IDEs can lead to remote code execution through COM vulnerabilities, with practical exploit chains for Visual Studio demonstrated.
HTML5 Attack and Defense
Explore HTML5 security: new attack vectors, vulnerabilities in modern web technologies, and best practices for secure coding in interactive applications.
Scale Hacking to Secure Your Cloud and Beyond
Learn tips and tricks for scaling bug hunting in cloud environments, enhancing your cybersecurity skills and improving your ability to find vulnerabilities efficiently.
Reverse Engineering Satellite Based IP Content Distribution
Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.
Static Analysis-Based Recovery of Service Function Calls in UEFI Firmware
Discover a new tool for automated recovery of service calls and EFI type info in UEFI firmware, simplifying vulnerability hunting and making firmware code resemble original source.
Mobile Hacking - OWASP Mobile Project and How to Use It for White Hat Hacking
Explora los proyectos OWASP para seguridad móvil: MASVS para verificación y MSTG para pruebas e ingeniería inversa. Aprende a evaluar y mejorar la seguridad de aplicaciones iOS y Android.
Don't Trust the NIC - Attacking Windows NDIS Drivers
Exploración de vulnerabilidades en controladores NDIS de Windows, demostrando ataques y problemas de seguridad en implementaciones de proveedores, incluyendo Microsoft.
Sleeping with the Enemy Compiler - Software Vulnerabilities Caused by Optimizations
Técnicas de optimización del compilador pueden introducir vulnerabilidades en software de seguridad. Se presentan ejemplos, demostraciones en vivo y soluciones para evitar estos problemas causados por optimizaciones.
Making Android's Bootable Recovery Work For You
Explore Android's bootable recovery mode to create custom tools for security testing, forensics, and device modification. Learn to build and customize recovery images for various Android devices.
Fuzzing - Finding Your Own Bugs and 0days
Aprende técnicas de fuzzing para descubrir vulnerabilidades y exploits de día cero. Incluye demostraciones prácticas de Buffer Overflow y creación de shellcode para pruebas de penetración.
Let's Play with Objection
Exploración de hackeo móvil con Objection: instrumentación, comandos y demostración en vivo de edición de aplicaciones Android en tiempo real para abusar de mecanismos de control.
#Eko2020 DevSecOps Space | Agustín Celano: AppSec VulnMgmt Pipelines
Enfoque práctico para gestionar vulnerabilidades en entornos CI/CD mediante AppSec pipelines, herramientas de staging y escalamiento de hallazgos en DevSecOps.
Social Engineering - Web Scraping con Python para la recolección de información
Aprende técnicas de web scraping con Python para recolectar información en escenarios de ingeniería social y OSINT. Explora problemáticas comunes y sus soluciones en esta charla de la Ekoparty Security Conference.
Historias de vulnerabilidades de un Bug Hunter
Descubre vulnerabilidades web comunes desde la perspectiva de un experimentado bug hunter. Aprende técnicas útiles para pentesting y mejora tus habilidades en seguridad informática.
A New Trend for the Blue Team - Using a Symbolic Engine to Detect Evasive Forms of Malware - Ransomware
Explore symbolic engines for detecting evasive malware and ransomware, enhancing blue team capabilities in reverse engineering and threat analysis.
Building an Open Source Artificial Pancreas
Exploring the development of an open-source artificial pancreas system for type 1 diabetes management, its technical aspects, and personal impact on blood sugar control.
Better Integration Tests for Performance Monitoring
Discover how Slack built "Slerf" to detect and prevent performance regressions, improving product stability while maintaining high development velocity.
Observability - Superpowers for Developers
Explore how integrating observability into development enhances productivity, transforms production environments, and empowers developers with practical superpowers for debugging and improving systems.
Behind the New York Times Crossword
Explore the tech behind The New York Times Crossword: serverless architecture, Go rewrite, traffic management, and innovation driving the popular puzzle from creation to solving.
Browser Testing Using Grammars and a Consensus Oracle
Explore property-based testing for browser rendering using grammar-based generators and consensus oracles. Learn innovative techniques to identify and minimize failing test cases.
It's Not You, It's the API - Automatically Avoiding API Misuses
Automated approach to detect and prevent API misuses by mining usage patterns, creating rules, and implementing checks, bridging the gap between API designers and users.