Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 8 11 17 25 37 54 79 116 170 249 365 532 534 783 895 1144 1146 1313 1429 1508 1562 1599 1600 1601 1602 1603 1604 1624 1641 1653 1661 1667 1670 1673 1675 1676 1677 1678 ▲ ▼
Runtime Kernel Patching on Mac OS X Bosse Eriksson Security Researcher, Bitsec Runtime kernel patching has been around for almost ten years and is a technique frequently used by various rootkits to subvert the kernel's used in many modern operating systems. This technique does not require any types of kernel modules or extensions and will allow you to hide various things like processes, files, folders and network connections by ....
Runtime Kernel Patching on Mac OS X Bosse Eriksson Security Researcher, Bitsec Runtime kernel patching has been around for almost ten years and is a technique frequently used by various rootkits to subvert the kernel's used in many modern operating systems. This technique does not require any types of kernel modules or extensions and will allow you to hide various things like processes, files, folders and network connections by ....
Runtime Kernel Patching on Mac OS X Bosse Eriksson Security Researcher, Bitsec Runtime kernel patching has been around for almost ten years and is a technique frequently used by various rootkits to subvert the kernel's used in many modern operating systems. This technique does not require any types of kernel modules or extensions and will allow you to hide various things like processes, files, folders and network connections by ....
Protecting Against and Investigating Insider Threats (A methodical, multi-pronged approach to protecting your organization) Antonio "Tony" Rucci Program Director, Technical Intelligence and Security Programs, Oak Ridge National Laboratory This presentation will focus on indicators of insider threats and how to detect them. I’ll primarily focus on specific hiring practices to minimize risk to your organization. We’ll take a deep dive ....
eXercise in Messaging and Presence Pwnage Ava Latrope Security Consultant, iSEC Partners eXtensible Messaging and Presence Protocol, or XMPP, is a is a set of specialized XML-based protocols that are an increasingly popular choice for a variety of middleware applications. It's a sprawling project implemented differently by many popular projects and services, and is used for purposes ranging from chat rooms and video conferencing to c....
Robot Shark Laser! What Hackerspaces Do Beth FreeSide, dc404 and KaosTheory Security Research Noid BlackLodge Nick Farr HacDC Leigh Honeywell HackLab Steve Clement Syn2cat Ever wonder what they mean by 'Fight Club for Nerds'? Do you daydream about what you could do if you had an underground lab and minions or a workshop and helpers? Have you considered all the ways to incorporate lasers into your life? Are you sure about that....
eXercise in Messaging and Presence Pwnage Ava Latrope Security Consultant, iSEC Partners eXtensible Messaging and Presence Protocol, or XMPP, is a is a set of specialized XML-based protocols that are an increasingly popular choice for a variety of middleware applications. It's a sprawling project implemented differently by many popular projects and services, and is used for purposes ranging from chat rooms and video conferencing to c....
Robot Shark Laser! What Hackerspaces Do Beth FreeSide, dc404 and KaosTheory Security Research Noid BlackLodge Nick Farr HacDC Leigh Honeywell HackLab Steve Clement Syn2cat Ever wonder what they mean by 'Fight Club for Nerds'? Do you daydream about what you could do if you had an underground lab and minions or a workshop and helpers? Have you considered all the ways to incorporate lasers into your life? Are you sure about that....
eXercise in Messaging and Presence Pwnage Ava Latrope Security Consultant, iSEC Partners eXtensible Messaging and Presence Protocol, or XMPP, is a is a set of specialized XML-based protocols that are an increasingly popular choice for a variety of middleware applications. It's a sprawling project implemented differently by many popular projects and services, and is used for purposes ranging from chat rooms and video conferencing to c....
Robot Shark Laser! What Hackerspaces Do Beth FreeSide, dc404 and KaosTheory Security Research Noid BlackLodge Nick Farr HacDC Leigh Honeywell HackLab Steve Clement Syn2cat Ever wonder what they mean by 'Fight Club for Nerds'? Do you daydream about what you could do if you had an underground lab and minions or a workshop and helpers? Have you considered all the ways to incorporate lasers into your life? Are you sure about that....
Sniff Keystrokes With Lasers/Voltmeters - Side Channel Attacks Using Optical Sampling Of Mechanical Energy And Power Line Leakage Andrea Barisani Chief Security Engineer, Inverse Path Ltd. Founder& Project Coordinator, oCERT Daniele Bianco Hardware Hacker, Inverse Path Ltd. TEMPEST attacks, exploiting Electro Magnetic emissions in order to gather data, are often mentioned by the security community, movies and wanna-be ....
A Low Cost Spying Quadrotor for Global security Applications Using Hacked Commercial Digital Camera Antoine Gademer Corentin Chéron Accessing centimetric georeferenced images is crucial for local military or civil intelligence, reconnaissance and surveillance applications. When classical satellite or aerial imagery is not available the Unmanned Aircraft Systems (UAS) are often a very interesting solution. But having an operational ....
Sniff Keystrokes With Lasers/Voltmeters - Side Channel Attacks Using Optical Sampling Of Mechanical Energy And Power Line Leakage Andrea Barisani Chief Security Engineer, Inverse Path Ltd. Founder& Project Coordinator, oCERT Daniele Bianco Hardware Hacker, Inverse Path Ltd. TEMPEST attacks, exploiting Electro Magnetic emissions in order to gather data, are often mentioned by the security community, movies and wanna-be ....
A Low Cost Spying Quadrotor for Global security Applications Using Hacked Commercial Digital Camera Antoine Gademer Corentin Chéron Accessing centimetric georeferenced images is crucial for local military or civil intelligence, reconnaissance and surveillance applications. When classical satellite or aerial imagery is not available the Unmanned Aircraft Systems (UAS) are often a very interesting solution. But having an operational ....
Sniff Keystrokes With Lasers/Voltmeters - Side Channel Attacks Using Optical Sampling Of Mechanical Energy And Power Line Leakage Andrea Barisani Chief Security Engineer, Inverse Path Ltd. Founder& Project Coordinator, oCERT Daniele Bianco Hardware Hacker, Inverse Path Ltd. TEMPEST attacks, exploiting Electro Magnetic emissions in order to gather data, are often mentioned by the security community, movies and wanna-be ....
Session Donation Alek Amrani It's easier to give away than it is to take. Apply that theory to Session Hijacking, and enter Session Donation. Session Donation is a computer session attack that attempts to gain information by taking session hijacking in an entirely new direction. Session Donation is an interesting new spin on an old attack that is much harder to prevent than it's predecessor, and equally as dangerous. Alek ..
Session Donation Alek Amrani It's easier to give away than it is to take. Apply that theory to Session Hijacking, and enter Session Donation. Session Donation is a computer session attack that attempts to gain information by taking session hijacking in an entirely new direction. Session Donation is an interesting new spin on an old attack that is much harder to prevent than it's predecessor, and equally as dangerous. Alek ..
Session Donation Alek Amrani It's easier to give away than it is to take. Apply that theory to Session Hijacking, and enter Session Donation. Session Donation is a computer session attack that attempts to gain information by taking session hijacking in an entirely new direction. Session Donation is an interesting new spin on an old attack that is much harder to prevent than it's predecessor, and equally as dangerous. Alek ..
Failure Adam Savage Co-Host, MythBusters A meditation on how I've screwed things up, lost friends and clients, and learned about myself in the process. Adam Savage has spent his life gathering skills that allow him to take what's in his brain, and make it real. He's built everything from ancient Buddhas to futuristic weapons, from spaceships to dancing vegetables, from fine art sculptures to animated chocolate -- and just about anyt....
Oh, the horror... - murphyslab.ca - 16 years ago - eng
Some concepts are difficult to teach to students because it is something which you take for granted because it is so deeply ingrained. Chemistry concepts from first year university can be like that. But the most difficult experience in my teaching practice might have been this morning. It was difficult because each answer the student gave raised new questions about how much she was missing in her educational foundation. During the morning ..
Good Vibrations: Hacking Motion Sickness on the Cheap Tottenkoph consultant, crypto-fiend, hacker, and awesome chix0r Motion sickness has been an issue since man learned how to travel by means other than by foot, with the earliest recorded cases dating back to ancient Greece. Although the problem has existed for such a long time, there has been no documented case of a cure for all forms and severities of motion sickness and the ..
Good Vibrations: Hacking Motion Sickness on the Cheap Tottenkoph consultant, crypto-fiend, hacker, and awesome chix0r Motion sickness has been an issue since man learned how to travel by means other than by foot, with the earliest recorded cases dating back to ancient Greece. Although the problem has existed for such a long time, there has been no documented case of a cure for all forms and severities of motion sickness and the ..
Good Vibrations: Hacking Motion Sickness on the Cheap Tottenkoph consultant, crypto-fiend, hacker, and awesome chix0r Motion sickness has been an issue since man learned how to travel by means other than by foot, with the earliest recorded cases dating back to ancient Greece. Although the problem has existed for such a long time, there has been no documented case of a cure for all forms and severities of motion sickness and the ..
Bluetooth, Smells Like Chicken Dominic Spill Security Researcher Michael Ossmann Wireless Security Researcher Mark Steward Security Researcher Bluetooth traffic analysis is hard. Whilst most 802.11 chips support promiscuous mode, Bluetooth dongles cannot monitor all traffic due to a pseudo-random frequency hopping system. Previous attempts have recovered a small number of channels using software radio techniques but have required....
Bluetooth, Smells Like Chicken Dominic Spill Security Researcher Michael Ossmann Wireless Security Researcher Mark Steward Security Researcher Bluetooth traffic analysis is hard. Whilst most 802.11 chips support promiscuous mode, Bluetooth dongles cannot monitor all traffic due to a pseudo-random frequency hopping system. Previous attempts have recovered a small number of channels using software radio techniques but have required....
Bluetooth, Smells Like Chicken Dominic Spill Security Researcher Michael Ossmann Wireless Security Researcher Mark Steward Security Researcher Bluetooth traffic analysis is hard. Whilst most 802.11 chips support promiscuous mode, Bluetooth dongles cannot monitor all traffic due to a pseudo-random frequency hopping system. Previous attempts have recovered a small number of channels using software radio techniques but have required....
Is That You, Baby, or Just a Bridge in the Sky? Douglas C. Merrill Douglas C. Merrill was Chief Operating Officer of New Music for EMI Records and President of EMI’s Digital Business from 2008 to 2009. In those roles, he was responsible for the operation of the new music creation business, and led all of EMI’s digital strategy, innovation, business development, supply chain and global technology activities. Dr. Merrill served....
Is That You, Baby, or Just a Bridge in the Sky? Douglas C. Merrill Douglas C. Merrill was Chief Operating Officer of New Music for EMI Records and President of EMI’s Digital Business from 2008 to 2009. In those roles, he was responsible for the operation of the new music creation business, and led all of EMI’s digital strategy, innovation, business development, supply chain and global technology activities. Dr. Merrill served....
Is That You, Baby, or Just a Bridge in the Sky? Douglas C. Merrill Douglas C. Merrill was Chief Operating Officer of New Music for EMI Records and President of EMI’s Digital Business from 2008 to 2009. In those roles, he was responsible for the operation of the new music creation business, and led all of EMI’s digital strategy, innovation, business development, supply chain and global technology activities. Dr. Merrill served....
Doppelganger: The Web's Evil Twin Edward Zaborowski Senior Security Engineer, Apptis Users and administrators alike surf the web assuming that, for the most part, what they are looking at is what the website served to their browser; however, an attacker can deploy a malicious proxy, altering responses and requests, as well as potentially stealing sensitive data, all without a user being aware. In this presentation I will discuss....
Doppelganger: The Web's Evil Twin Edward Zaborowski Senior Security Engineer, Apptis Users and administrators alike surf the web assuming that, for the most part, what they are looking at is what the website served to their browser; however, an attacker can deploy a malicious proxy, altering responses and requests, as well as potentially stealing sensitive data, all without a user being aware. In this presentation I will discuss....
Metasploit Goes Web Efrain Torres Metasploit Team This topic will present and discuss the new Metasploit plugin for web exploitation and assessment. WMAP is part of the Metasploit framework and it is build with a different approach compared to other open source alternatives and commercial scanners. WMAP is not build around any browser or spider for data capture and manipulation and as test modules are implemented as auxiliary modules....
Metasploit Goes Web Efrain Torres Metasploit Team This topic will present and discuss the new Metasploit plugin for web exploitation and assessment. WMAP is part of the Metasploit framework and it is build with a different approach compared to other open source alternatives and commercial scanners. WMAP is not build around any browser or spider for data capture and manipulation and as test modules are implemented as auxiliary modules....
Metasploit Goes Web Efrain Torres Metasploit Team This topic will present and discuss the new Metasploit plugin for web exploitation and assessment. WMAP is part of the Metasploit framework and it is build with a different approach compared to other open source alternatives and commercial scanners. WMAP is not build around any browser or spider for data capture and manipulation and as test modules are implemented as auxiliary modules....
Asymmetric Defense: How to Fight Off the NSA Red Team with Five People or Less Efstratios L. Gavas Assistant Professor, United States Merchant Marine Academy The NSA sponsors an annual Cyber Defense Exercise (CDX) to raise awareness of and help develop cyber defense skills in our armed forces. This is the story of how the United Stated Merchant Marine Academy, the smallest of the five undergraduate service academies, has managed to h....
Asymmetric Defense: How to Fight Off the NSA Red Team with Five People or Less Efstratios L. Gavas Assistant Professor, United States Merchant Marine Academy The NSA sponsors an annual Cyber Defense Exercise (CDX) to raise awareness of and help develop cyber defense skills in our armed forces. This is the story of how the United Stated Merchant Marine Academy, the smallest of the five undergraduate service academies, has managed to h....
Asymmetric Defense: How to Fight Off the NSA Red Team with Five People or Less Efstratios L. Gavas Assistant Professor, United States Merchant Marine Academy The NSA sponsors an annual Cyber Defense Exercise (CDX) to raise awareness of and help develop cyber defense skills in our armed forces. This is the story of how the United Stated Merchant Marine Academy, the smallest of the five undergraduate service academies, has managed to h....
Using Guided Missiles in Drive-Bys: Automatic browser fingerprinting and exploitation with Metasploit Egypt Core Developer, Metasploit Project The blackhat community has been using client-side exploits for several years now. Multiple commercial suites exist for turning webservers into malware distribution centers. Unfortunately for the pentester, acquiring these tools requires sending money to countries with no extradition treaties, ....
Using Guided Missiles in Drive-Bys: Automatic browser fingerprinting and exploitation with Metasploit Egypt Core Developer, Metasploit Project The blackhat community has been using client-side exploits for several years now. Multiple commercial suites exist for turning webservers into malware distribution centers. Unfortunately for the pentester, acquiring these tools requires sending money to countries with no extradition treaties, ....
Using Guided Missiles in Drive-Bys: Automatic browser fingerprinting and exploitation with Metasploit Egypt Core Developer, Metasploit Project The blackhat community has been using client-side exploits for several years now. Multiple commercial suites exist for turning webservers into malware distribution centers. Unfortunately for the pentester, acquiring these tools requires sending money to countries with no extradition treaties, ....
Hello, My Name is /hostname/ Endgrain Student of computer science at the University of Southern Maine Tiffany Rad Part-time Professor, Computer Science Department, University of Southern Maine Dan Kaminsky Director of Pen Testing, IOActive It is widely known that MAC addresses are spoofable, however many access control models rely on them to uniquely identify devices. When host names are set to be user's real names and are broadc....
Hello, My Name is /hostname/ Endgrain Student of computer science at the University of Southern Maine Tiffany Rad Part-time Professor, Computer Science Department, University of Southern Maine Dan Kaminsky Director of Pen Testing, IOActive It is widely known that MAC addresses are spoofable, however many access control models rely on them to uniquely identify devices. When host names are set to be user's real names and are broadc....
Hello, My Name is /hostname/ Endgrain Student of computer science at the University of Southern Maine Tiffany Rad Part-time Professor, Computer Science Department, University of Southern Maine Dan Kaminsky Director of Pen Testing, IOActive It is widely known that MAC addresses are spoofable, however many access control models rely on them to uniquely identify devices. When host names are set to be user's real names and are broadc....
Managed Code Rootkits - Hooking into Runtime Environments Erez Metula Application Security Department manager, 2BSecure This presentation introduces a new concept of application level rootkit attacks on managed code environments, enabling an attacker to change the language runtime implementation, and to hide malicious code inside its core. Taking the ".NET Rootkits" concepts a step further, while covering generic methods of malware d....
1 2 3 5 8 11 17 25 37 54 79 116 170 249 365 532 534 783 895 1144 1146 1313 1429 1508 1562 1599 1600 1601 1602 1603 1604 1624 1641 1653 1661 1667 1670 1673 1675 1676 1677 1678 ▲ ▼
29 visitors online