Grand Theft House - RF Lock Pick Tool to Unlock Smart Door Lock
Explore vulnerabilities in smart door locks using RF technology, analyzing secure rolling code algorithms and encryption standards to understand potential security threats in IoT devices.
The Evolution of Threat Models for Secure Communication Products
Explore the evolution of threat models in secure communication, including end-to-end protocols, vendor security, and recent vulnerabilities like Efail, with PGP creator Phil Zimmermann.
Grid Computing Attacks on Streaming Services
Uncovers vulnerabilities in grid computing-based live streaming platforms, demonstrating potential for screen manipulation, unauthorized access, and system compromise. Highlights risks in popular Korean services.
Hands-on Introduction to Timeless Debugging & Analysis
Hands-on lab introducing timeless debugging and analysis for reverse-engineering. Learn to navigate from crashes to root causes using REVEN platform on Windows scenarios. Combines GUI and Python API approaches.
Automatic Generation of ROP Chains
Introduces EasyROP, a tool for automating ROP attacks by finding gadgets in binary files. Analyzes Windows libraries for attack feasibility and demonstrates a real-world application on CVE-2010-3333.
The Best Laid Schemes - Attacking URL Schemes
Exploring URL scheme vulnerabilities in web exploits, including SSRF and XXE attacks. Analyzes browser-specific attack surfaces and introduces a new Firefox 0day for arbitrary code execution.
Breakout Script of the Westworld - Tianwen Tang & Wei Xiao
Exploración de técnicas modernas de explotación para productos de virtualización de VMware, incluyendo ejemplos prácticos de escape de Workstation y ESXi, y discusión de primitivas de explotación avanzadas.
Improving Unicode Attacks With Deep Learning
Exploración de ataques Unicode mejorados con aprendizaje profundo, creando un diccionario de caracteres confundibles para desarrollar herramientas ofensivas sofisticadas y nuevos procedimientos de prueba de aplicaciones.
Might As Well JUMP - Exploit Development For Java Serialization
Explore Java serialization exploit development, including 0day custom exploits, reverse engineering, and ROP techniques. Learn to break HMAC/MAC and create Python exploits for educational purposes.
IoT - A Security Hole Without A Patch
Explores IoT security challenges, highlighting vulnerabilities, real-world attacks, and industry changes needed for secure IoT implementation and usage.
Breaking Web3 - Exploitation Techniques for Cryptocurrency Hacking
Exploration of common vulnerabilities in Web3 projects, covering blockchain topology, node exploitation, DoS attacks, social engineering, and smart contract vulnerabilities in cryptocurrency systems.
Attacking WPA3 - New Vulnerabilities And Exploit Framework
Uncovers critical vulnerabilities in WPA3, including DoS attacks and traffic interception. Presents a new Wi-Fi testing framework for researchers to identify and exploit these weaknesses in various devices.
Random Walk Through A Few Million Things
Explore IoT security challenges in enterprises, examining millions of devices to reveal vulnerabilities, default credentials, and outdated firmware. Gain insights into the current state of IoT security.
All Your DNS Records Point to Us - Understanding the Security Threats of Dangling DNS Records
Explore security threats of dangling DNS records, understanding vulnerabilities and potential exploits in domain name systems.
Coverage-based Greybox Fuzzing as Markov Chain
Explore coverage-based greybox fuzzing as a Markov chain process, enhancing software testing efficiency and vulnerability detection in computer security applications.
An In-Depth Study of More Than Ten Years of Java Exploitation
Comprehensive analysis of Java exploitation trends over a decade, examining vulnerabilities, attack vectors, and security implications for developers and researchers.
Inside Web Attacks - The Real Payloads
Explore real-world payloads used by attackers exploiting major vulnerabilities, based on CloudFlare's unique insights from protecting millions of websites.
Go Get My - Vulnerabilities - An In-Depth Analysis of Go Language Runtime and the New Class of Vulnerabilities It Introduces
Explore Go language runtime vulnerabilities, their impact on applications, and potential security risks in this in-depth analysis of Golang's growing adoption across various programming domains.
Dragon Tails - Measuring Dependence on International Vulnerability Research
Análisis cuantitativo del impacto de las restricciones chinas en la divulgación de vulnerabilidades de software, examinando su efecto en productos propietarios y de código abierto.
Discovering 20 Year Old Vulnerabilities in Modern Windows Kernel
Explore how legacy components in Windows 10 can harbor decades-old vulnerabilities, focusing on printer drivers and their potential security implications.
Secure Boot Under Attack - Simulation to Enhance Fault Attacks & Defenses
Explore fault injection attacks on Secure Boot, their impact on embedded systems, and strategies for enhancing defenses through simulation techniques.