Kali Linux - Penetration Testing
Learn penetration testing with Kali Linux: explore tools like Metasploit, Nmap, Armitage, and more for network scanning, vulnerability analysis, and ethical hacking techniques.
Robbing the Bank with Automated Reasoning - Using Formal Methods for EMV Payment Protocol Security
Uncover critical vulnerabilities in EMV payment protocols using automated reasoning. Learn how formal methods can expose security flaws in widely-used smartcard payment systems.
Ekoparty Summer Workshops 2023 - Hackeando Contratos en Blockchain
Análisis interactivo de incidentes de seguridad en contratos Solidity, explorando perspectivas de desarrolladores y atacantes para mejorar la comprensión y mitigación de vulnerabilidades en blockchain.
Zed Attack Proxy - Introduction to Web Application Security Testing
Aprende a utilizar ZAP, un proxy de interceptación para observar solicitudes y respuestas en aplicaciones web. Descubre técnicas de hacking ético y seguridad informática con un experto en el campo.
DevSecOps Endgame: Threat Modeling as a Game - Workshop
Taller interactivo sobre modelado de amenazas en DevSecOps. Aprende técnicas prácticas para identificar vulnerabilidades, evaluar riesgos y desarrollar aplicaciones más seguras de forma divertida y dinámica.
Web3 - Lessons from the Past, Present Challenges, and Future Solutions for Blockchain Security
Explora vulnerabilidades en Web3, lecciones de Web2 y soluciones para el futuro. Analiza desafíos actuales, riesgos en contratos inteligentes y estrategias para mejorar la seguridad blockchain.
Log4JMX - The Vulnerability that Never Existed
Explore the intriguing case of Log4JMX, a supposed vulnerability that turned out to be non-existent, in this cybersecurity presentation at DefCamp Cluj-Napoca 2024.
Complex Paths and Derelict Sentinels - Software Engineering Underpinnings of NTP Vulnerabilities
Explore software engineering choices behind recent NTP vulnerabilities, focusing on packet consistency checks, ephemeral associations, and spoofing in this IEEE conference talk.
An Experimental Security Analysis of an Industrial Robot Controller
Experimental security analysis of industrial robot controllers, revealing vulnerabilities and potential attacks that can compromise precision, control logic, and safety in automated manufacturing environments.
Transys - Leveraging Common Security Properties Across Hardware Designs
Explore hardware security validation techniques and learn how to leverage common security properties across different designs using Transys, improving efficiency in vulnerability detection.
Security of GPS - INS Based On-Road Location Tracking Systems
Explores vulnerabilities in GPS/INS location tracking for road transport, demonstrating how adversaries can spoof routes to reach alternate destinations undetected. Proposes countermeasures to enhance system security.
A Formal Security Analysis of the W3C Web Payment APIs - Attacks and Verification
Explore formal security analysis of W3C Web Payment APIs, including potential attacks and verification methods. Learn about browser models and gain insights into API security.
Log4Shell Vulnerability - Bugcrowd Security Flash
Explore the critical Log4Shell vulnerability, its impact, and mitigation strategies in this concise security briefing from Bugcrowd's expert.
Code That Gets You Pwned - Common Vulnerabilities in Golang, Ruby, and Python
Explore non-obvious vulnerabilities in Golang, Ruby, and Python, covering topics like Tempfile, path.Clean, URL parsing, and Unicode security implications.
Attacking JWT - Header Injection Techniques
Learn techniques for attacking JSON Web Tokens through header injections, including algorithm and JWK header attacks. Gain practical insights into exploiting JWT vulnerabilities.
Xenpwn - Breaking Paravirtualized Devices
Explore techniques for exploiting vulnerabilities in paravirtualized devices, focusing on Xen hypervisor security and potential attack vectors in virtualized environments.
The Birth of a Complete IE11 Exploit Under New Exploit Mitigations
Explore advanced techniques for developing a full IE11 exploit, navigating modern security measures and mitigation strategies.
Breaking Antivirus Software - Security Vulnerabilities and Exploits
Explore techniques for exploiting vulnerabilities in antivirus software, uncovering potential security flaws and weaknesses in these critical defense systems.
Adventures with Cybercrime Toolkits - Insights for Pragmatic Defense
Explore pragmatic defense strategies against cybercrime toolkits, combining reactive, proactive, and offensive approaches to counter threats and leverage criminals' weaknesses.
Stack Overflow: A Story of Two Security Tales - Enhancing Software Security
Exploring Stack Overflow's dual impact on software security: potential vulnerabilities and effective solutions. Highlights research findings and proposes design tweaks to enhance secure development practices.
AI and Cybersecurity - The Twain Shall Meet
Explore AI's role in cybersecurity, focusing on advanced persistent threats, intrusion detection systems, and vulnerability analysis using ontologies and reasoning techniques.