Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Explore vulnerability research on Google's Titan M security chip, including fuzzing techniques, impact analysis, and mitigation strategies for modern device protection.
Attacking IOBluetoothFamily HCI and Vendor-Specific Commands
Explores vulnerabilities in Bluetooth stacks, focusing on Host-Controller Interface (HCI) and vendor-specific commands. Demonstrates attack techniques and discusses security implications for MacOS and iOS devices.
How Embedded TCP-IP Stacks Breed Critical Vulnerabilities
Explore critical vulnerabilities in embedded TCP/IP stacks, their impact on system security, and techniques for analysis and mitigation in networked embedded systems.
The Weakest Element of Acquiring Bank Infrastructure
Exploring vulnerabilities in Terminal Management Systems for card payments, revealing potential security risks in acquiring bank infrastructure and POS terminals.
FIDLing with Decompilers
Explore decompilation basics, popular tools, and the Hex-Rays Decompiler. Learn about FIDL, a new library simplifying decompiler API usage, with practical examples and demos.
Exploiting Directory Permissions on macOS
Explore macOS directory permission vulnerabilities, from arbitrary overwrites to privilege escalation. Learn techniques to control file contents and understand the intricacies of macOS security.
Blockchain and Smart Contract Attack Vectors
Explore blockchain vulnerabilities, smart contract issues, and topology attacks. Learn best practices for mitigating risks in decentralized systems and Ethereum-based platforms.
Exposing Hidden Exploitable Behaviors Using EDF
Exposing hidden exploitable behaviors in programming languages using differential fuzzing. Techniques for identifying undocumented functions, OS command execution vulnerabilities, and other security issues.
In Depth Analysis of Multicast DNS and DNS Service Discovery
Análisis profundo de los protocolos mDNS y DNS-SD, explorando sus vulnerabilidades inherentes y posibles vectores de ataque en entornos de red de configuración cero.
Cache Side Channel Attacks - CPU Design As A Security Problem
Explore CPU cache vulnerabilities and side-channel attacks, their impact on security, and potential mitigations in modern computing environments like cloud and multi-user systems.
Finding Vulnerabilities in iOS - MacOS Networking Code
Explore iOS/macOS networking vulnerabilities, focusing on mbuf processing in XNU kernel. Learn about network packet structures, vulnerability discovery techniques, and PoC exploit development.
Hacking Chemical Plants for Competition and Extortion
Explore cyber-physical attacks on industrial systems, from initial espionage to targeted economic damage. Learn attacker strategies, defense opportunities, and the complexities of manipulating chemical processes.
Analysis to Remote Root 0day in a SSL-VPN Appliance
Análisis detallado de vulnerabilidades en un dispositivo SSL-VPN líder, revelando fallas de seguridad y demostrando la explotación para obtener acceso root remoto no autenticado.
The Inside Story - There Are Apps in Apps and Here Is How to Break Them
Explore instant app architecture and attack models, uncovering vulnerabilities in this popular app format. Learn about security implications and potential exploits in click-to-play designs.
Exploiting Excel Online
Explore Excel Online vulnerabilities, focusing on integer overflow in fnConcatenate formula. Learn about chaining formulas for remote code execution and potential security implications.
Reversing the Root - Identifying the Exploited Vulnerability in 0-Days Used In-The-Wild
Explore techniques for identifying root cause vulnerabilities in exploited 0-days, including binary patch diffing, exploit minimization, and reverse engineering, to enhance cybersecurity analysis and threat mitigation.
Practical Attacks Against Attribute-based Encryption
Explore practical attacks on attribute-based encryption, examining vulnerabilities in multi-authority schemes and their implications for cloud security and IoT applications.
PCIe Device Attacks - Beyond DMA - Exploiting PCIe Switches, Messages and Errors
Explore advanced PCIe security threats targeting switches and Translation Layer Packets. Learn about novel attack vectors beyond traditional DMA exploits in high-bandwidth peripheral connections.
A Brief History of Mitigation - The Path to EL1 in iOS 11
Explore the async_wake exploit for iOS 11.1.2, examining each step and the mitigations overcome. Gain insights into iOS security vulnerabilities and exploitation techniques.
Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths
Explore Ethereum smart contract vulnerabilities, reverse engineering techniques, and new tools for analyzing blockchain attacks through real-world examples and practical demonstrations.
Hunting Vulnerabilities of gRPC Protocol Armed Mobile - IoT Applications
Explore security vulnerabilities in gRPC-powered mobile and IoT apps. Learn about common pitfalls, attack vectors, and strategies to enhance protection in this high-performance protocol.