Summer of Fuzz - MacOS
Explore overlooked attack surfaces on macOS through fuzzing techniques. Learn to bypass security protections, debug effectively, and use new tools for crash triage in Apple core apps and services.
Coverage-based Greybox Fuzzing as Markov Chain
Explore coverage-based greybox fuzzing as a Markov chain process, enhancing software testing efficiency and vulnerability detection in computer security applications.
Scanalog - Interactive Design and Debugging of Analog Circuits with Programmable Hardware
Interactive tool for rapid analog circuit design using programmable hardware. Enables real-time manipulation, feedback, and testing without manual assembly, streamlining the iterative design process.
Bypassing Secure Boot Using Fault Injection
Explore fault injection techniques to bypass Secure Boot in embedded systems, focusing on hardware-based attacks when logical vulnerabilities are absent.
Effective File Format Fuzzing – Thoughts, Techniques and Results
Explore advanced file format fuzzing techniques for vulnerability hunting, including setup, scalability, and achieving optimal results against modern software.
Secure Boot Under Attack - Simulation to Enhance Fault Attacks & Defenses
Explore fault injection attacks on Secure Boot, their impact on embedded systems, and strategies for enhancing defenses through simulation techniques.
Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit
Explore coverage-based fuzzing of RDP client virtual channels, targeting complex functionalities like Sound, Graphics, USB, and Filesystem to uncover potential vulnerabilities and crashes.
Automation Techniques in C++ Reverse Engineering
Explore dynamic analysis techniques for C++ reverse engineering, focusing on structure usage and function argument types through DLL injection-based automation.
Demigod - The Art of Emulating Kernel Rootkits
Explore advanced techniques for emulating and analyzing kernel rootkits, enhancing cybersecurity defenses against high-privilege malware operating at the OS level.
Automated vs. Manual Security - You Can't Scan for The Stupid
Explore the limitations of automated security tools and the importance of manual testing in identifying vulnerabilities that scanners miss, particularly those caused by human error.
Big Game Hunting
Discover simple techniques for bug hunting on AIX and IBM products, building on "Breaking The Links" methodology and exploring new vulnerabilities.
House of Cards - How Not to Collapse When Bad Things Happen
Discover how to build resilient enterprise security by actively testing defenses, validating controls, and learning from simulated scenarios to prepare for real-world threats and challenges.
Reverse Engineering and Bug Hunting on KMDF Drivers
Explore reverse engineering and bug hunting techniques for KMDF drivers, focusing on entry points, IO queues, and implementation vulnerabilities. Gain practical skills for analyzing driver security.
Reverse Engineering Windows Malware 101 Workshop
Hands-on workshop introducing reverse engineering fundamentals for Windows malware analysis. Learn to set analysis goals, use tools, and apply computer science concepts through practical exercises.
OpenStack API Security Testing Automation in Action
Automated security testing framework for OpenStack API, integrating with Agile and CI/CD. Demonstrates Rackspace's approach to detect vulnerabilities efficiently, improving consistency and auditability.
Testing Modern Applications with Hackazon
Learn to test modern web applications using Hackazon, focusing on e-commerce functions, AJAX workflows, and RESTful APIs. Discover hidden vulnerabilities and systematic testing approaches.
The ThreadFix Ecosystem - Vendors, Volunteers, and Versions
Explore ThreadFix: an open-source system for managing app vulnerabilities, automating security tasks, and integrating tools. Learn about its components, ecosystem, and real-world case studies of platform improvements.
New Farming Methods for the Epistemological Wasteland of Application Security
Explore innovative approaches to application security, focusing on early-stage security testing and practical tools for immediate implementation in development processes and delivery pipelines.
Your Last Manual Assessment
Automate security assessments using browser hooks and Selenium, transforming manual tests into robust scripts ready for continuous delivery integration.
Hunting For Bugs, Catching Dragons
Explore advanced techniques for identifying and exploiting software vulnerabilities, with insights from a renowned security researcher on discovering high-impact bugs.
Speeding Up Security Testing Panel
Panel discussion on accelerating security testing processes, featuring insights from industry experts on best practices, tools, and strategies for efficient vulnerability assessment.