Eko2020 Wardriving - Do Drink and Wardrive
Exploración de seguridad en redes inalámbricas mediante wardriving: análisis de protocolos de cifrado y mapeo de redes en movimiento. Adaptación online y presencial de la actividad anual de Ekoparty Security Conference.
Internet-Scale Analysis of AWS Cognito Security
Comprehensive analysis of AWS Cognito security configurations, revealing widespread vulnerabilities in identity pools and resource access. Includes methodology, findings, and recommendations for secure implementation.
PINATA - PIN Automatic Try Attack
Explore sophisticated PIN brute force attacks on EMV cards, analyzing vulnerabilities in implementation that could compromise millions of contact EMV systems despite security measures.
1-Click to Infiltrate Your Organization via Vulnerable VS Code Extensions
Explore vulnerabilities in popular VS Code extensions and their potential for supply chain attacks. Learn how attackers can compromise organizations through developers' IDEs.
Hidden in Plain Sight - How Possibly Could a Decades Old Standard Be Broken
Uncover vulnerabilities in long-standing standards and explore their implications for IoT security in this eye-opening talk by Paul Meller.
The Old Is New, Again - CVE20112461 Is Back
Explore the resurgence of CVE-2011-2461 vulnerability, its implications, and modern exploitation techniques in this cybersecurity deep dive.
Evaluating the APT Armor
Explore advanced techniques for evaluating APT defense mechanisms, focusing on real-world scenarios and practical strategies to enhance cybersecurity posture against sophisticated threats.
Not Yet Another Fuzzer
Explore NYAF, a multi-platform fuzzer using emulation and Generation Search algorithm for improved analysis of IOT devices, embedded systems, and firmware. Learn about its advantages in scalability and efficiency.
Raining CVEs on WordPress Plugins with Semgrep
Leveraging Semgrep to identify vulnerabilities in WordPress plugins, reducing false positives, and automating XSS validation. Includes demos on custom rule creation and the XSSBomb tool.
The One Weird Trick SecureROM Hates
Explore the unfixable Checkm8 vulnerability in iPhones' SecureROM, its exploitation for jailbreaking, and implications for iOS security research and device control.
Messenger Hacking - Remotely Compromising an iPhone through iMessage
Detailed exploration of a remote iPhone exploit via iMessage, covering vulnerability analysis, exploitation techniques, and mitigation strategies for mobile OS and messenger security.
IT-Sicherheit in vernetzten Gebäuden
Einführung in Sicherheitsprobleme und Lösungsansätze für vernetzte Gebäude am Beispiel des KNX-Standards. Beleuchtet Risiken, Datenschutzaspekte und Möglichkeiten zur nachträglichen Verbesserung der IT-Sicherheit in Gebäudeautomatisierungssystemen.
IoT RCE, a Study With Disney
Exploring IoT vulnerabilities using Disney Circle and Foscam devices as case studies, highlighting novel attack techniques and discussing the security implications of IoT in home networks.
What Makes Software Exploitation Hard?
Explore Project Zero's mission to make zero-day vulnerabilities harder, discussing technologies and trends that have increased difficulty in vulnerability discovery and exploitation.
CVE-Search
Explore CVE-Search, a free tool for collecting, searching, and analyzing software vulnerabilities. Learn how to enhance your cybersecurity practices with this powerful open-source solution.
GreedyBTS - Hacking Adventures in GSM
Explore GSM network vulnerabilities and attack tools that compromise phone calls, messaging, and web browsing. Learn about GSM architecture, weaknesses, and practical demonstrations of exploits.
SexyDefense - Maximizing the Home-Field Advantage
Maximizing home-field advantage in cybersecurity through proactive defense, intelligence gathering, and attacker modeling. Learn to adapt strategies, set traps, and take initiative for effective protection.
Dial V for Vulnerable - Attacking VoIP Phones
Explore VoIP phone vulnerabilities, attack methods, and security recommendations. Learn firmware access, emulation approaches, and exploit development for various VoIP devices.
How We Analyzed and Built an Exploit PoC for CVE-2022-24086, a Magento RCE - Catalin Filip - DefCamp - 2022
Explore the analysis and exploit development for CVE-2022-24086, a critical Magento RCE vulnerability, presented by a security researcher at DefCamp 2022.
Vulnerabilities Discovered in Android Stalkerware Apps - DefCamp - 2021
Explore vulnerabilities in Android stalkerware apps, including server leaks and compromise scenarios, with insights on reporting to vendors and potential security implications.
What It Takes to Be Good at Bug Bounty Hunting - DefCamp - 2021
Explore bug bounty hunting essentials, methodologies, and community insights. Learn from a passionate expert about getting started, understanding applications, and collaborating effectively in the field.