LoRaWAN Auditing
Comprehensive guide to LoRaWAN security auditing, covering vulnerabilities, testing methods, and new tools. Provides practical insights for securing IoT deployments in smart cities and industries.
Hadoop Safari - Hunting for Vulnerabilities
Explore Hadoop security vulnerabilities and attack vectors in Big Data environments. Learn practical techniques to access data lakes and exploit weaknesses in cluster infrastructures.
SCADA in the Cloud
Explore cloud-based SCADA systems, their vulnerabilities, and cybersecurity implications in industrial control networks. Learn about potential risks and emerging trends in this critical infrastructure technology.
Dive into Apple IO80211FamilyV2
Explore Apple's IO80211FamilyV2 Wi-Fi architecture, its features, and potential vulnerabilities. Learn about reverse engineering, attack surfaces, and the latest security concerns in macOS Catalina.
Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies
Exposing security vulnerabilities in electronic trading platforms, highlighting risks in mobile, desktop, and web applications for investors of all levels.
FPs Are Cheap - Show Me the CVEs
Evaluating SAST tools: Learn how to assess their effectiveness in finding real vulnerabilities using synthetic test suites and practical examples of CVEs.
From Hackathon to Hacked - Web3's Security Journey
Explore Web3 and blockchain security challenges, examining the risks of emerging tech, high-stakes environments, and immutable transactions. Learn about current vulnerabilities and potential solutions.
Two Factor Failure
Explore vulnerabilities in Two-Factor Authentication systems, including a new attack on mobile TOTP. Learn best practices for secure 2FA deployment in enterprise and web applications.
VOIP Wars - Destroying Jar Jar Lync
Explore vulnerabilities in Microsoft Lync/Skype for Business, including VoIP attacks, security design flaws, and client-side threats. Learn about attack vectors and practical threats with live demonstrations.
I'm Not a Human - Breaking the Google reCAPTCHA
Explore techniques to bypass Google's reCAPTCHA using risk analysis manipulation, deep learning for image recognition, and automated solving methods. Discusses implications for CAPTCHA security.
The Kitchen's Finally Burned Down - DLP Security Bakeoff
Explore flaws in Data Loss Prevention solutions, including administrative interfaces and inspection engines, to understand their capabilities and shortcomings in protecting sensitive information.
Attacking BYOD Enterprise Mobile Security Solutions
Exposé des failles de sécurité des solutions BYOD et EMS, avec démonstration d'attaques et présentation d'un nouvel outil, Swizzler, pour contourner les protections sur appareils jailbreakés ou non.
Attacking SDN Infrastructure - Are We Ready for the Next-Gen Networking?
Exploring SDN vulnerabilities through attacks on control plane, channel, and data plane. Demonstrates critical exploits affecting network availability and confidentiality, and introduces SDN security projects.
Relaying EMV Contactless Transactions Using Off-The-Shelf Android Devices
Unveils vulnerabilities in EMV Contactless payments, demonstrating relay attacks using common Android devices. Explores implications for transaction security and public acceptance of contactless payments.
Feeding Gophers to Ghidra
Improve Golang binary analysis in Ghidra with Java-based scripts. Recover strings, functions, and types for efficient malware research and vulnerability detection.
Terminal Server
Explore Terminal Server vulnerabilities and security implications in Windows environments. Learn advanced techniques for penetration testing and risk mitigation.
A Comparison of Buffer Overflow Prevention Implementations and Weaknesses
Comprehensive analysis of buffer overflow prevention techniques, exploring implementations and vulnerabilities to enhance cybersecurity strategies.
Defeating Automated Web Assessment Tools
Explore techniques to bypass automated web security scanners, enhancing your understanding of vulnerabilities and improving defensive strategies against potential exploits.
The Bug Hunter's Methodology v4 - Recon Edition
Explore cutting-edge techniques for bug hunters and red teamers to discover and expand attack surfaces, focusing on domain reconnaissance, subdomain enumeration, and IP space analysis.
Hacking Lync or The Weakest Lync
Explore vulnerabilities in Microsoft Lync/Skype for Business, learn attack techniques, and discover methods to secure your communications infrastructure.
Diggin Deep into Newly Created Domains
Explore techniques for investigating newly registered domains, uncovering potential threats, and enhancing cybersecurity through proactive domain analysis.