A Race Against Time - How to Exploit Race Conditions in Web Apps
Explora la explotación de condiciones de carrera en aplicaciones web, presentando herramientas de prueba y demostraciones de escenarios de ataque del mundo real.
Practical Mobile App Attacks By Example - Mobile Hacking
Explore real-world mobile app vulnerabilities through practical examples, covering Android and iOS security flaws, anti-patterns, and actionable insights for defenders and penetration testers.
Internet of Dongs
Sicherheitsrisiken und Datenschutzprobleme bei vernetzten Sexspielzeugen: Analyse von Schwachstellen in Apps, Backends und Hardware sowie deren Auswirkungen auf die Privatsphäre der Nutzer.
On the Insecure Nature of Turbine Control Systems in Power Generation
Explore security vulnerabilities in turbine control systems for power generation, including assessment methodologies, attack vectors, and remediation strategies for industrial owners.
Bringing Zero Trust to Industrial Control Systems
Explore Zero Trust concepts for Industrial Control Systems, addressing vulnerabilities and improving cybersecurity readiness across IT and OT domains for enhanced threat response.
The Only Constant
Explore the evolution of cybersecurity, analyze industry missteps, predict future trends, and plan for upcoming transformations in the face of emerging technologies and vulnerabilities.
Mobile MFA Madness - Mobile Device Hygiene and MFA Integrity Challenges
Explore vulnerabilities in mobile authenticator apps and learn how poor device hygiene compromises MFA integrity. Includes live demonstration of exploiting these weaknesses.
Measuring Cybersecurity Effectiveness in a Threat-Based World
Experts discuss leveraging threat data for improved cybersecurity, focusing on DHS, NSA, and NIST initiatives to enhance information protection, detection, and response in government agencies.
The End of Security Stupidity
Experts discuss the end of ineffective practices in information security, predicting a shift towards more meaningful certifications, better training, and effective solutions to combat cyber threats.
Abusing Security Products to Bypass Windows Protections
Unveiling critical vulnerabilities in security products that allow bypassing Windows protections. Explores impact, solutions, and provides a validation tool for system security.
Case Study in Using Bad Malware Design Against Attackers
Explore how poor design choices in malware can be exploited by defenders, featuring case studies like AlienSpy/JSocket. Learn strategies to disable malware globally by leveraging vulnerabilities in their implementation.
Hacking the Unhackable - Pwning the Bitfi Crypto Wallet
Explore the security flaws in the Bitfi crypto wallet, learn from its mistakes, and understand best practices for secure device development and responsible disclosure.
Understanding the Win SMB NTLM Weak Nonce Vulnerability
Explore the Win SMB NTLM weak nonce vulnerability, its implications, and potential exploits in this technical deep dive from security experts Ochoa and Azubel.
The Story Continues - Hacking Some More Secure Portable Storage Devices
Exposé sur les failles de sécurité des dispositifs de stockage portables "sécurisés" avec chiffrement matériel AES, démontrant leur vulnérabilité malgré les promesses des fabricants.
Hacking Driverless Vehicles
Explore vulnerabilities in autonomous vehicles, from sensors to decision-making systems. Learn about potential exploits and emerging vehicle-to-vehicle communication programs.
Hacking KPN - Lessons From The Trenches
Explore real-world cybersecurity challenges and solutions through KPN's hacking experience, offering valuable insights for security professionals and enthusiasts.
Nightmares of a Pentester
Explore real-world challenges and unexpected scenarios faced by penetration testers, offering insights into the complexities of cybersecurity assessments and ethical hacking.
How I Hacked a Bank Using Pen & Paper
Discover how a security expert exploited vulnerabilities in a Norwegian bank's systems using only pen and paper, revealing critical flaws in identity verification and account access processes.
No IOUs with IOT
Explore IoT security challenges, outbreaks, and solutions with insights on smart TVs, herd immunity, and enterprise perspectives. Learn practical strategies for safeguarding connected devices.
Ethical Internet Scanning in 2022
Explore ethical approaches to internet-wide scanning, including best practices, vulnerability assessment, and measuring risk exposure in the digital landscape.
Backslash Powered Scanning - Implementing Human Intuition
Innovative web scanner using intuitive techniques to detect injection vulnerabilities, offering WAF evasion, minimal network footprint, and adaptability to input filtering. Explores advanced exploitation methods and handles complex findings.