Analyzing Cellular Basebands with FirmWire
Explore FirmWire, an open-source platform for analyzing cellular basebands. Learn about baseband vulnerabilities, emulation techniques, and how to uncover security flaws in LTE and GSM stacks.
Writing a New Decompiler for JRuby Security Audits
Explore JRuby vulnerabilities and learn about YBurj, a new open-source decompiler for JRuby IR, enabling recovery of compiled source code for enhanced security audits.
Escaping From VMware Workstation Through the Disk Controller
Exploración detallada de una vulnerabilidad en los controladores de disco de VMware Workstation que permite escapar de una máquina virtual, con demostraciones de exploits para Linux y Windows.
B(l)utter - Reversing Flutter Applications - HITB2023HKT COMMSEC Day 2
Innovative approach to reverse engineering Flutter apps using Dart runtime source code. Introduces B(l)utter tool for metadata extraction, code analysis, and Frida script generation.
Security Research with Open Source Software - Volume Omega
Explore open source software security with the OpenSSF Alpha-Omega team. Learn about automated security patches, vulnerability research, and tools to address global security concerns in the OSS ecosystem.
Exploit Hall of Fame Interview - Project Zero's Natalie Silvanovich
Insightful interview with Project Zero's Natalie Silvanovich, exploring her expertise in exploit research and cybersecurity. Gain valuable insights into vulnerability discovery and cutting-edge security practices.
PWN2OWN Austin 2021 - Phones, Printers, NAS, and More
Explore cutting-edge cybersecurity challenges at PWN2OWN Austin 2021, featuring hacking competitions for phones, printers, NAS devices, and routers with over $500,000 in prizes.
Drone vs Tesla: Exploiting Vulnerabilities in Automotive Systems
Explore the security vulnerabilities in Tesla vehicles through a drone-based attack demonstration, highlighting potential risks and countermeasures in automotive cybersecurity.
The Hack@DAC Story - Learnings from Organizing the World's Largest Hardware Hacking Competition
Explore insights from organizing Hack@DAC, the world's largest hardware hacking competition. Learn about unique aspects, value for the security community, and key takeaways for industry, academia, and researchers.
Inside Apple's Lightning: JTAGging the iPhone for Fuzzing and Profit
Explore Apple's Lightning protocol, learn iPhone JTAGging techniques, and discover fuzzing methods for potential vulnerabilities and profit.
Exploit Engineering: Attacking the Linux Kernel
Explore Linux kernel exploitation techniques, from attack surface mapping to vulnerability discovery and exploit development. Gain insights into advanced kernel exploitation methods and tools.
Changing and Unchanged Things in Vulnerability Research
Explore vulnerability research evolution, from buffer overflows to advanced fuzzing and exploit mitigations. Analyze case studies and future trends in offensive and defensive security strategies.
Unearthing Vulnerabilities in the Apple Ecosystem - The Art of KidFuzzerV2.0
Explore Apple's kernel vulnerabilities, attack surfaces, and mitigations. Learn advanced fuzzing techniques and root cause analysis for enhanced security understanding.
Advancements in JavaScript Engine Fuzzing - OffensiveCon 2023
Explore advancements in JavaScript engine fuzzing, covering techniques like splicing, code coverage, and hybrid engines to enhance bug discovery and security testing.
New Phones, Software and Chips - New Bugs?
Explore cutting-edge vulnerabilities in modern smartphones, examining software and hardware innovations that introduce new security challenges.
How to Hack Shannon Baseband from a Phone
Explore techniques for hacking Shannon baseband from a phone, uncovering vulnerabilities and potential exploits in mobile communication systems.
ASN.1 and Done: A Journey of Exploiting ASN.1 Parsers in the Baseband
Explore ASN.1 parser vulnerabilities in cellular baseband, uncovering security risks and exploitation techniques in mobile communication systems.
Abusing Linux In-Kernel SMB Server to Gain Kernel Remote Code Execution
Explore Linux kernel vulnerabilities and gain insights into exploiting the in-kernel SMB server for remote code execution.
The Print Spooler Bug that Wasn't in the Print Spooler
Explore a unique Windows vulnerability discovery, from initial bug report to full exploit chain, with insights on Microsoft's patch process and security implications.
URB Excalibur - New VMware All-Platform VM Escapes
Unveils groundbreaking research on VMware hypervisor vulnerabilities, focusing on virtual USB controllers. Demonstrates novel VM escape techniques using URB, showcasing a critical heap out-of-bounds write vulnerability across all VMware platforms.
The Dark Side of EDR - Repurposing EDR as an Offensive Tool
Explore innovative attack vector transforming EDR into stealthy malware. Learn to bypass security features, exfiltrate data, and establish persistent control, focusing on Palo Alto Networks Cortex XDR.