Codema Attack - Controlling Your Smart Home Through Dangling Management Channels
Análisis de vulnerabilidades en dispositivos IoT populares y desarrollo de CGuard, un nuevo marco de control de acceso para proteger a los usuarios finales de amenazas en canales de gestión.
Explosion - The Hidden Mines in the Android ION Driver
Uncover vulnerabilities in Android's ION driver, explore root causes, and learn how to achieve privilege escalation. Gain insights into preventing similar security issues in the Android ecosystem.
Unix Domain Socket - A Hidden Door Leading to Privilege Escalation in the Android Ecosystem
Explore Unix domain socket vulnerabilities in Android, revealing potential privilege escalation risks and security implications for third-party applications and vendor implementations.
Hunting and Exploiting Recursive MMIO Flaws in QEMU KVM
Explore security vulnerabilities in QEMU/KVM hypervisors caused by recursive MMIO handling, uncovering a new attack surface with potential for critical exploits in cloud computing environments.
Start Arbitrary Activity App Components as the System User Vulnerability Affecting Samsung Android
Vulnerability in Samsung Android allows zero-permission apps to execute arbitrary activities as system user, compromising device security across multiple Android versions.
ThunderStrike 2 - Sith Strike
Explore firmware vulnerabilities in Mac systems, demonstrating software-only attacks and showcasing the potential of Mac firmware malware. Learn about shared vulnerabilities and case studies.
Lessons Learned from Eight Years of Breaking Hypervisors
Explore vulnerabilities in popular hypervisors, examining security features, attack surfaces, and design flaws. Gain insights on improving hypervisor security through real-world examples and expert recommendations.
Poacher Turned Gamekeeper - Lessons Learned from Eight Years of Breaking Hypervisors
Explore hypervisor vulnerabilities, attack surfaces, and security design flaws through real-world examples. Learn key lessons for improving hypervisor security and hardening techniques.
Understanding TOCTTOU in the Windows Kernel Font Scaler Engine
Explore TOCTTOU vulnerabilities in Windows Kernel Font Scaler Engine, covering basic double fetch issues, stealthy design flaws, and their impact on system security. Learn about font file manipulation and exploit techniques.
The Little Pump Gauge That Could - Attacks Against Gas Pump Monitoring Systems
Explore attacks on gas pump monitoring systems, their vulnerabilities, and the motives behind them. Learn about honeypot deployment and prevention strategies.
WebKit Everywhere - Secure or Not?
Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.
The Perl Jam 2 - The Camel Strikes Back
Exploring critical vulnerabilities in Perl's core modules and CGI frameworks, demonstrating fundamental language issues through 0-days, and challenging the "developer's fault" narrative.
ZigBee Exploited - The Good, The Bad, And The Ugly
Explore ZigBee's security vulnerabilities in IoT devices, focusing on smart home applications. Learn about weaknesses, practical exploits, and a new security-testing framework for this widespread communication standard.
Insecurity of Mobile Banking
Explore mobile banking app security, revealing privacy risks and vulnerabilities through static and dynamic analysis. Gain insights into global banking app practices and their implications.
Bypassing Malware Detection Mechanisms in Online Banking
Explore vulnerabilities in online banking malware detection systems, revealing implementation errors and potential improvements for enhanced security.
Resurrecting the Read Logs Permission on Samsung Devices
Exploit allowing non-privileged apps to access sensitive log data on Samsung devices, bypassing Android's READ_LOGS permission restrictions. Reveals private information from notifications and system logs.
AndroBugs Framework - An Android Application Security Vulnerability Scanner
Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.
Taxonomic Modeling of Security Threats in Software Defined Networking
Comprehensive analysis of security threats in Software Defined Networking, exploring vulnerabilities, potential attack scenarios, and providing recommendations for effective countermeasures.
Discover Vulnerabilities with CodeQL
Explore CodeQL's static and taint analysis capabilities to uncover vulnerabilities, including potential RCE flaws. Learn key concepts for effective code analysis and security testing.
Server Message Block Worms - The Gift That Keeps on Giving
Explore Server Message Block (SMB) worms, their exploitation, and incident response strategies. Learn detection, containment, and prevention techniques for enhanced network security.
AFL-Unicorn - Fuzzing the 'Unfuzzable'
Explore afl-unicorn, a tool bridging manual research and AFL's automation for vulnerability discovery in complex systems, with practical workflow insights for various targets.