Using EMET to Disable EMET
Explore techniques to bypass EMET's security mitigations, including targeted evasion methods and generic disabling approaches applicable to various endpoint protection products.
Privilege Escalation Using DOP in MacOS
Explore privilege escalation in MacOS using Data-Oriented Programming (DOP), a powerful exploit technique that leverages heap buffer overflow vulnerabilities for persistent attacks resistant to kernel code changes.
Automated Black-box Security Testing of Smart Embedded Devices
Innovative approach for IoT black-box fuzzing using "fuzzing triggers" from companion apps to generate optimal inputs, overcoming limitations of existing tools and discovering zero-day vulnerabilities.
Hunting Windows Desktop Window Manager Bugs
Exploring Windows Desktop Window Manager vulnerabilities, focusing on DirectComposition UserSpace. Covers architecture, attack surfaces, and specific CVEs, offering insights into bug hunting techniques and security implications.
How Segment Proactively Protects Customer's API Keys
Discover Segment's innovative approach to safeguarding API keys, addressing the critical issue of secret leaks on GitHub and enhancing overall security for user data and actions.
Securing the Pipeline - Protecting Self-Hosted GitHub Runners
Learn to secure self-hosted GitHub runners, mitigate risks of compromised access tokens, and implement key configuration adjustments to protect CI/CD pipelines from potential network breaches.
Life of a Bug - An Insight on the GitHub Bounty Program
Explore GitHub's bug bounty program, from initial submission to resolution. Learn about the roles of Bug Bounty and PSIRT teams, and gain insights into the incident response process.
Stop Committing Your Secrets - Git Hooks To The Rescue
Learn to prevent accidental secret commits using Git hooks, enhancing code security and safeguarding sensitive information before it reaches remote repositories.
Nu - Achieving Microsecond-Scale Resource Fungibility with Logical Processes
Innovative approach to resource management in datacenters using logical processes, enabling rapid resource reassignment and improved efficiency through microsecond-scale proclet migration.
Gitdigger - Creating Useful Wordlists From Public GitHub Repositories
Learn to create valuable wordlists from GitHub repositories using Gitdigger. Explore techniques for data extraction, processing, and generating outputs for various security applications.
Vaccinating Android
Explore Android security, decompilation, and analysis techniques. Learn about APK tools, dynamic and static analyses, and hacking challenges in this comprehensive mobile security talk.
Invasive Roots of Anti-Cheat Software
Explore the intrusive nature of anti-cheat software in gaming, examining its impact on system security and user privacy. Gain insights into the complex balance between game integrity and personal data protection.
Security Testing for Smart Metering Infrastructure
Comprehensive guide to security testing for smart metering infrastructure, covering threat vectors, test plans, and best practices for AMI projects and production transitions.
Harvesting Passwords from Source Code Repositories
Discover techniques for extracting sensitive credentials from code repositories, enhancing security awareness and prevention strategies for developers and organizations.
Beyond the Tip of the Iceberg - Fuzzing Binary Protocol for Deeper Code Coverage
Explore advanced fuzzing techniques for binary protocols, enhancing code coverage and uncovering vulnerabilities in network applications and file systems.
State of Healthcare Cyber Safety
Explore healthcare cybersecurity challenges and advancements with experts discussing regulatory perspectives, device maker insights, and physician viewpoints on cyber safety in medical technology.
How to Have a Successful Career and Also Be Happy
Discover strategies for career success and happiness through continuous learning, curiosity, and gratitude. Gain insights from an experienced entrepreneur on finding meaning and making an impact in your professional life.
How to Reverse Software Entropy
Explore strategies to combat software decay, improve technical hygiene, and reverse entropy in software development. Learn practical approaches for maintaining and enhancing code quality over time.
Practical Data Privacy
Explore practical implementation of privacy technology in software, covering theories, open-source libraries, and examples to kickstart your journey into privacy engineering.
Wie man mit Mathematik ein API übernehmen kann - und wie gute Architektur das verhindert
Entdecken Sie, wie mathematische Schwachstellen in der Kryptographie zur Übernahme eines API-Gateways führen können und lernen Sie Strategien zur Verhinderung solcher Angriffe durch defensive Architektur.
P4wnP1 A.L.O.A. - Kleine Schweinereien mit dem Raspberry Pi Zero W
Entdecken Sie die Sicherheitslücken von Computern durch kreative Nutzung des Raspberry Pi Zero W. Lernen Sie, wie man unbemerkt Zugriff erlangt und Systeme manipuliert.