In Soviet Russia, Vulnerability Finds You - DefCamp - 2017
Exploración de vulnerabilidades de seguridad en sistemas cotidianos, desde cámaras de vigilancia hasta tarjetas de fidelización, revelando riesgos y estrategias de ataque en diversos contextos tecnológicos.
How I Hacked My City - DefCamp 2016
Explore urban hacking through a real-world case study of Tel Aviv's open WiFi network, uncovering vulnerabilities and demonstrating practical exploitation techniques.
Playing in the Sandbox - Bypassing Adobe Flash Input Validation
Explore Adobe Flash sandbox vulnerabilities, focusing on input validation flaws in file path handling. Learn about local and remote sandbox escapes, their implications, and broader security considerations.
All Your Cloud Are Belong To Us – Hunting Compromise in Azure
Explore cloud security vulnerabilities, attack tactics, and proactive measures for Azure and AWS. Learn about hunting compromised systems and securing cloud marketplaces.
Hackeando Aplicaciones móviles de ¿Seguridad?
Demostración de vulnerabilidades en aplicaciones móviles de seguridad mediante ingeniería inversa e instrumentación dinámica, con casos de estudio reales de applockers, control parental y anti-robo.
Abusing Google Play Billing for Fun and Unlimited Credits! - G. Lopes - Hack in Paris
Explore vulnerabilities in Google Play Billing API, analyzing real-world examples and demonstrating how attackers can bypass payment processes in popular Android games through reverse engineering.
Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
Learn how to implement real-time vulnerability alerting using principles from the US Tsunami Warning Center, covering triage methods, data analysis, and prioritization techniques.
The Aftermath of a Fuzz Run - What to Do About Those Crashes?
Explore tools and techniques for analyzing crashes from fuzz runs, focusing on reducing, triaging, and finding root causes to fix vulnerabilities in software applications.
The Devils in the Dependency - Data Driven Software Composition Analysis
Análisis de datos sobre el uso de bibliotecas de código abierto en aplicaciones, examinando vulnerabilidades, dependencias y patrones de actualización para mejorar la seguridad del software.
WiFuzz - Detecting and Exploiting Logical Flaws in the Wi-Fi Cryptographic Handshake
Explore techniques for detecting and exploiting logical vulnerabilities in Wi-Fi cryptographic handshake implementations, focusing on model-based testing and real-world examples.
Biometric Authentication Under Threat - Liveness Detection Hacking
Explore techniques for bypassing biometric authentication systems, including facial and voiceprint recognition, through liveness detection hacking and specific attack methods.
Intercepting iCloud Keychain
Discover critical cryptographic flaws in iCloud Keychain's end-to-end encryption, potentially allowing attackers to access plaintext secrets through man-in-the-middle attacks on iCloud communications.
Crouching Hacker, Killer Robo? Removing Fear from Cyber-Physical Security
Exploring cyber-physical security beyond fear-mongering, this talk examines root causes of vulnerabilities and proposes better approaches to embed security analysis in system design.
ICS SCADA Security Analysis of a Beckhoff CX5020 PLC
Análisis de seguridad de un PLC Beckhoff CX5020 utilizado en sistemas SCADA, revelando vulnerabilidades y demostrando formas de obtener control sobre el programa y el sistema operativo.
Old Tools New Tricks - Hacking WebSockets
Explore WebSocket hacking techniques, from basic concepts to advanced exploits, using various tools and methods for secure testing and vulnerability assessment.
Bug Hunting in RouterOS
Explore RouterOS vulnerabilities, including developer backdoors, key negotiation, and protocol analysis. Learn about CVEs and policy discovery techniques for enhanced network security.
Drone Penetration Testing and Vulnerability Analysis Framework
Explore an open-source framework for drone security testing, covering attack types and vulnerability analysis. Learn to assess and enhance drone safety in various applications.
Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models
Novel model inversion attacks on classification models reveal vulnerabilities in ML technologies, potentially leaking sensitive training data. Explores confidence score-based and label-only attacks, demonstrating disparate vulnerability across different…
Embedded Device Vulnerability Analysis Case Study Using Trommel
Comprehensive methodology for embedded device vulnerability analysis, covering firmware, web app, mobile app, and hardware. Includes case study and TROMMEL tool introduction.
Lock It and Still Lose It - On the -In-Security of Automotive Remote Keyless Entry Systems
Unveils vulnerabilities in automotive remote keyless entry systems, demonstrating how attackers can exploit flaws to gain unauthorized access to vehicles from major manufacturers.
Unearthing the TrustedCore - A Critical Review on Huawei’s Trusted Execution Environment
Unveils critical security flaws in Huawei's TrustedCore, exposing vulnerabilities in trusted execution environments and demonstrating weaknesses in hardware-backed cryptography on mobile devices.