ViewTube

It can be very difficult for those new to hacking to learn about vulnerability discovery and exploit development on modern ...

Memory corruption vulnerabilities have plagued computer systems since we started programming software. Techniques for ...

How to Disclose or Sell an Exploit Without Getting in Trouble JAMES DENARO PARTNER, CIPHERLAW You have identified a ...

A new wave of attacks has targeted CentreStack and Triofox servers using an unpatched Local File Inclusion vulnerability ...

In this talk I will show how to reverse engineer a proprietary HTTP Server in order to leverage memory corruption vulnerabilities ...

DARPA's Grand Cyber Challenge foretold an ominous future stricken with machines exploiting our code and automatically ...

In this talk, we will present novel vulnerabilities and exploitation techniques that reliably bypass Linux syscall tracing. A user mode ...

View the full free MOOC at https://ost2.fyi/Exp4011. This is it! This is the class that *actually* teaches you how to exploit a race ...

Phantom attack is a collection of attacks that evade Linux system call monitoring. A user mode program does not need any special ...

Privilege escalation is a common attack vector in the Windows OS. Today, there are multiple offensive tools in the wild that can ...

A Password is Not Enough: Why disk encryption is broken and how we might fix it DANIEL SELIFONOV Since the publication of ...

Like most modern devices, building controllers have increasingly become network connected, exposing them to a wider range of ...

What can you do, as an attacker, when you find yourself as a low privileged Windows user with no path to SYSTEM? Install a ...

Imagine being able to get together with a few of your co-workers, look at your office keys and derive a building master key. Or you ...

Cisco ASA and ASA-X are widely deployed firewalls that are relied upon to protect internal networks from the dangers of the ...

A debugger is always a valuable tool when searching for vulnerabilities, particularly in embedded systems where multiple ...

Cisco has issued an urgent warning regarding a critical vulnerability, CVE-2024-20353, in its Identity Services Engine (ISE).

VoIP Wars: Return of the SIP FATIH OZAVCI INFORMATION SECURITY RESEARCHER AND CONSULTANT, VIPROY ...

A concept is a brick. It can be used to build a courthouse of reason. Or it can be thrown through the window.” ― Gilles Deleuze ...

Ever wonder why there isn't a metasploit-style framework for Android apps? We did! Whether you're a developer trying to protect ...

Over the past years, our team has used several new approaches to identify multiple critical vulnerabilities in SQLite and Curl, two ...

Alarm systems are ubiquitous - no longer the realm of banks and vaults only, many people now have them in their homes or ...

In this presentation we are going to explain and demonstrate step by step in a real attack scenario how a remote attacker could ...

View the full free MOOC at https://ost2.fyi/Exp4011. This is it! This is the class that *actually* teaches you how to exploit a race ...

In 2010, Stuxnet, the most powerful malware in the world revealed itself, causing physical damage to Iranian nuclear enrichment ...