Tailored, Machine Learning-Driven Password Guessing Attacks and Mitigation
Explore machine learning-driven password guessing attacks and mitigation strategies in this DefCamp 2018 presentation, enhancing your cybersecurity knowledge and defense capabilities.
Pyrotechnic Composition - Fireworks, Embedded Wireless and Insecurity-by-Design
Explore embedded wireless vulnerabilities in fireworks systems, revealing insecurity-by-design issues and potential risks in pyrotechnic compositions used for public displays and entertainment.
Mobile Signaling Threats and Vulnerabilities - Real Cases and Statistics
Explore real-world mobile signaling threats and vulnerabilities through case studies and statistics presented at DefCamp 2018, offering insights into critical information security challenges.
Practical Brute Force of Military Grade AES-1024
Analyse von Sicherheitslücken in der DataVault-Verschlüsselungssoftware für USB-Sticks und Festplatten. Aufdeckung schwerwiegender Mängel bei Schlüsselableitung und Verschlüsselung trotz starker Sicherheitsversprechen.
Understanding the Prevailing Security Vulnerabilities in TrustZone-Assisted TEE Systems
Comprehensive analysis of security vulnerabilities in TrustZone-assisted Trusted Execution Environments, exploring architecture issues, implementation bugs, and hardware flaws across popular TEE systems. Offers insights for improving TEE security.
Introduction to Bug Hunting
Learn essential techniques and strategies for identifying and reporting software vulnerabilities, enhancing your skills in ethical hacking and cybersecurity.
The Invasion of Bad Drivers
Explore vulnerabilities in peripheral drivers, including a 0day discovery, exploitation techniques, and mitigation strategies. Learn about common security risks and how to protect your system.
Security Journey in French Network Access Controller
Exploration des vulnérabilités des contrôleurs d'accès réseau, en particulier Alcasar. Analyse des failles de sécurité et des moyens de contournement, avec focus sur l'authentification et la protection des mots de passe.
Your Exploit is Mine - Automatic Shellcode Transplant for Remote Exploits
Innovative technique for automatic shellcode transplantation in remote exploits, enabling efficient reuse and adaptation of existing exploits with new shellcode through symbolic tracing and layout remediation.
Attacking Wide Scopes
Explore techniques for attacking wide-scope targets in bug bounty programs. Learn strategies to identify vulnerabilities and maximize your impact when dealing with extensive attack surfaces.
Breaking the x86 Instruction Set
Uncover hidden x86 instructions and hardware bugs through innovative processor fuzzing techniques and page fault analysis, revealing chipset secrets.
A Retrospective on the Use of Export Cryptography
Explores vulnerabilities in TLS due to export-grade cryptography, examining FREAK, Logjam, and Drown attacks, their impact, and lessons for future cryptographic protocol design and implementation.
Breaking the Payment Points of Interaction
Explore vulnerabilities in payment systems and learn techniques to secure Points of Interaction (POI) in this insightful cybersecurity presentation by industry experts.
An Experience Report on Extracting and Viewing Memory Events via Wireshark
Innovative system for monitoring low-level memory events using Wireshark, enhancing debugging, reverse engineering, and security analysis. Offers efficient, non-invasive memory event tracking with wide-ranging applications.
Examining Zero-Shot Vulnerability Repair with Large Language Models
Explore the potential of large language models in automatically identifying and repairing software vulnerabilities without prior training, enhancing cybersecurity practices.
Tooling Up for Kerberos
Explore Kerberos security with custom tools, focusing on local machine vulnerabilities and privilege escalation. Gain insights into complex Kerberos artifacts for enterprise network protection.
Common Vulnerabilities You Wish Your Java App Didn't Have
Explore and learn to defend against prevalent Java vulnerabilities through real-world examples and practical code solutions for enhanced application security.
Hide and Seek with Spectres - Efficient Discovery of Speculative Vulnerabilities with Random Testing
Explore efficient techniques for uncovering speculative vulnerabilities using random testing, enhancing cybersecurity against Spectre-like attacks.
Breaking the Black-Box Security Coprocessor in the Nintendo Switch - A Story of Vulnerability After Vulnerability
Explore the process of exploiting vulnerabilities in the Nintendo Switch's security coprocessor, leading to arbitrary code execution at the highest security level.
Breaking Managed Data Services in the Cloud
Exploring vulnerabilities in core cloud infrastructure, revealing cross-tenant boundary breaches in major cloud vendors' services and their potential impact on customer security.
Attacking an Open Source U2F Device in 30 Minutes or Less
Explore vulnerabilities in FIDO U2F tokens, focusing on an open-source implementation. Learn about security features, design flaws, and potential attacks on hardware token security.