Selling 0-Days to Governments and Offensive Security Companies
Explore the intriguing world of vulnerability brokerage, including the process of selling 0-days, market dynamics, and key stakeholders involved in this secretive industry.
Selling 0-Days to Governments and Offensive Security Companies
Explore the intriguing world of vulnerability brokerage, including the process, market dynamics, and ethical considerations of selling 0-day exploits to governments and security firms.
Exploiting Android Messengers with WebRTC
Explore WebRTC vulnerabilities in Android messaging apps, their exploitation, and mitigation strategies. Learn about security research techniques and mobile application security.
XNU Heap Exploitation - From Kernel Bug to Kernel Control
Exploración detallada de la explotación del heap XNU, analizando dos vulnerabilidades del kernel y tres exploits. Cubre internos de XNU, técnicas de explotación y cambios entre versiones de iOS.
Don't Ruck Us Too Hard - Owning All of Ruckus AP Devices
Explore vulnerabilities in Ruckus AP devices, including pre-authentication remote code execution exploits. Learn about research methods, discovered CVEs, and a framework for cross-architecture analysis.
Contextomy - Let's Debug Together
Explore a critical iOS design flaw allowing remote code execution through debug session hijacking. Learn about the vulnerability's discovery, research, exploitation, and Apple's fix.
macOS Security Features Bypasses by Example
Explore macOS security features, vulnerabilities, and bypass techniques with a Microsoft security expert. Gain insights into SIP, TCC, and potential exploit avenues for researchers and professionals.
Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Explore vulnerability research on Google's Titan M security chip, including fuzzing techniques, impact analysis, and mitigation strategies for modern device protection.
Fuzzing File System Implementations to Uncover Security Bugs
Explore file system vulnerability research through fuzzing techniques on BSD systems. Learn to identify attack surfaces, automate testing, and uncover security bugs in kernel implementations.
Open Source Security – Vulnerabilities Never Come Alone
Explore open source security challenges, variant analysis techniques, and real-world case studies. Learn about vulnerabilities in popular software and gain insights from industry expert Fermin J. Serna.
The Road to iOS Sandbox Escape
Exploring iOS sandbox vulnerabilities through mach message IPC, revealing potential exploits in various daemons. Includes research tools and demonstrations of discovered vulnerabilities in Apple's mobile devices.
Kernel Exploit Hunting and Mitigation
Explore kernel exploit hunting and mitigation techniques, focusing on identifying and analyzing malware that leverages Windows kernel vulnerabilities for system compromise and evasion of security measures.
Securing Cyber-Physical Systems - Moving Beyond Fear
Exploring cybersecurity challenges in physical systems, this talk examines root causes of vulnerabilities and proposes systemic approaches to embed security in design, moving beyond fear-based tactics.
Researching New Attack Interfaces on iOS and OSX
Exploración de nuevas interfaces de ataque en iOS y OSX, revelando vulnerabilidades del kernel y controladores mediante ingeniería inversa, análisis estático/dinámico y fuzzing mejorado.
Aircraft Hacking - Practical Aero Series
Practical demonstration on remotely attacking and controlling aircraft systems, exploring vulnerabilities in aviation security through hacking techniques and protocols like ADS-B and ACARS.
LTE Pwnage - Hacking Core Network Elements
Explore LTE network vulnerabilities, legacy protocols, and security challenges in telecom core elements. Learn about DoS attacks, equipment vulnerabilities, and practical approaches to telecom product security lifecycle.
From Coordinated Disclosure to Cooperative Vulnerability Research When Dealing with Critical Software Stacks
Explore evolving approaches to vulnerability disclosure in critical software, emphasizing early cooperation between researchers and vendors for improved security outcomes.
iOS Jailbreak Internals - Userland Read-Only Memory Can Be Dangerous
Explora las vulnerabilidades en la memoria de solo lectura de iOS, analizando ataques DMA y explotando fallas en IOSurfaceAccelerator para lograr ejecución de código arbitrario y jailbreak.
Automated Discovery of Deserialization Gadget Chains
Explore automated discovery of deserialization gadget chains, understanding vulnerabilities, and learning techniques to find and mitigate exploits in Java libraries and applications.
Devils Are in the File Descriptors - It Is Time To Catch Them All
Explore vulnerabilities in Linux kernel file descriptor operations, focusing on high-risk scenarios in exporting and importing, and learn to identify and address these security concerns.
USMA - Share Kernel Code With Me
Explore Linux kernel attack methods, focusing on gadgets and CFI mitigation. Learn about innovative techniques to overcome limitations and enhance kernel exploitation strategies.