Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 8 11 17 25 37 54 79 116 170 249 365 532 534 783 895 1144 1146 1313 1429 1508 1562 1599 1601 1602 1603 1604 1605 1624 1641 1653 1661 1667 1670 1673 1675 1676 1677 1678 ▲ ▼
Managed Code Rootkits - Hooking into Runtime Environments Erez Metula Application Security Department manager, 2BSecure This presentation introduces a new concept of application level rootkit attacks on managed code environments, enabling an attacker to change the language runtime implementation, and to hide malicious code inside its core. Taking the ".NET Rootkits" concepts a step further, while covering generic methods of malware d....
Managed Code Rootkits - Hooking into Runtime Environments Erez Metula Application Security Department manager, 2BSecure This presentation introduces a new concept of application level rootkit attacks on managed code environments, enabling an attacker to change the language runtime implementation, and to hide malicious code inside its core. Taking the ".NET Rootkits" concepts a step further, while covering generic methods of malware d....
Dradis Framework - Sharing Information will get you Root etd Senior Security Consultant, NGS Software dradis is not a dream any more. It is a mature framework. Information sharing taken to a new level. If you are in the security industry is because you want to break stuff. Not because you like wasting your time. Not because you love to write reports. Not because you enjoy doing things twice, or doing them manually if they could be sc....
Dradis Framework - Sharing Information will get you Root etd Senior Security Consultant, NGS Software dradis is not a dream any more. It is a mature framework. Information sharing taken to a new level. If you are in the security industry is because you want to break stuff. Not because you like wasting your time. Not because you love to write reports. Not because you enjoy doing things twice, or doing them manually if they could be sc....
Dradis Framework - Sharing Information will get you Root etd Senior Security Consultant, NGS Software dradis is not a dream any more. It is a mature framework. Information sharing taken to a new level. If you are in the security industry is because you want to break stuff. Not because you like wasting your time. Not because you love to write reports. Not because you enjoy doing things twice, or doing them manually if they could be sc....
Jailbreaking and the Law of Reversing Fred Von Lohmann Senior Staff Attorney, EFF Jennifer Granick Civil Liberties Director, EFF Using jailbreaking of the iPhone as a primary example, the presentation will be an overview of the laws relating to reverse engineering of hardware and software. Developers who rely on reverse engineering face a thicket of potential legal obstacles, including license agreements, copyright, the Digita....
Jailbreaking and the Law of Reversing Fred Von Lohmann Senior Staff Attorney, EFF Jennifer Granick Civil Liberties Director, EFF Using jailbreaking of the iPhone as a primary example, the presentation will be an overview of the laws relating to reverse engineering of hardware and software. Developers who rely on reverse engineering face a thicket of potential legal obstacles, including license agreements, copyright, the Digita....
Jailbreaking and the Law of Reversing Fred Von Lohmann Senior Staff Attorney, EFF Jennifer Granick Civil Liberties Director, EFF Using jailbreaking of the iPhone as a primary example, the presentation will be an overview of the laws relating to reverse engineering of hardware and software. Developers who rely on reverse engineering face a thicket of potential legal obstacles, including license agreements, copyright, the Digita....
Router Exploitation FX of Phenoelit, Head, Recurity Labs GmbH Exploitation of active networking equipment has its own history and challenges. This session will take you through the full spectrum of possible attacks, what they yield and how the art of exploitation in that particular field evolved over the recent past to its present state. We will cover attacks on Cisco equipment and compare them to other specimen in the field, talk ab....
Router Exploitation FX of Phenoelit, Head, Recurity Labs GmbH Exploitation of active networking equipment has its own history and challenges. This session will take you through the full spectrum of possible attacks, what they yield and how the art of exploitation in that particular field evolved over the recent past to its present state. We will cover attacks on Cisco equipment and compare them to other specimen in the field, talk ab....
Router Exploitation FX of Phenoelit, Head, Recurity Labs GmbH Exploitation of active networking equipment has its own history and challenges. This session will take you through the full spectrum of possible attacks, what they yield and how the art of exploitation in that particular field evolved over the recent past to its present state. We will cover attacks on Cisco equipment and compare them to other specimen in the field, talk ab....
Introduction to WiMAX Hacking Goldy Pierce WiMAX is a new high speed, 802.16e, wide area broadband service that promises to replace 3G high speed networks. It is only being offered in a few cities across the country, but by 2012 it is estimated that it will be nation wide. Over the last decade, hackers have explored and demonstrated weaknesses in the security of WiFi, pushing the industry to come up with better security practices. ....
Introduction to WiMAX Hacking Goldy Pierce WiMAX is a new high speed, 802.16e, wide area broadband service that promises to replace 3G high speed networks. It is only being offered in a few cities across the country, but by 2012 it is estimated that it will be nation wide. Over the last decade, hackers have explored and demonstrated weaknesses in the security of WiFi, pushing the industry to come up with better security practices. ....
Introduction to WiMAX Hacking Goldy Pierce WiMAX is a new high speed, 802.16e, wide area broadband service that promises to replace 3G high speed networks. It is only being offered in a few cities across the country, but by 2012 it is estimated that it will be nation wide. Over the last decade, hackers have explored and demonstrated weaknesses in the security of WiFi, pushing the industry to come up with better security practices. ....
Stealing Profits from Stock Market Spammers or: How I learned to Stop Worrying and Love the Spam Grant Jordan WiseCrack Tools Every time you look at your inbox, there it is... SPAM! Your penis needs enlargement, a horny single girl from Russia "accidentally" emailed you, and a former Nigerian prince knows that you're just the man to safeguard his millions. But in 2007, while still a student at MIT, one particular kind caught my eye: ....
Stealing Profits from Stock Market Spammers or: How I learned to Stop Worrying and Love the Spam Grant Jordan WiseCrack Tools Every time you look at your inbox, there it is... SPAM! Your penis needs enlargement, a horny single girl from Russia "accidentally" emailed you, and a former Nigerian prince knows that you're just the man to safeguard his millions. But in 2007, while still a student at MIT, one particular kind caught my eye: ....
Stealing Profits from Stock Market Spammers or: How I learned to Stop Worrying and Love the Spam Grant Jordan WiseCrack Tools Every time you look at your inbox, there it is... SPAM! Your penis needs enlargement, a horny single girl from Russia "accidentally" emailed you, and a former Nigerian prince knows that you're just the man to safeguard his millions. But in 2007, while still a student at MIT, one particular kind caught my eye: ....
Attacking Tor at the Application Layer Gregory Fleischer Security Researcher Surfing the web using Tor makes you invincible, right? Wrong! Between the technical deficiencies, web browser idiosyncrasies, Tor vulnerabilities, social engineering, and bone-headed user decisions, there is ample room for attack and exploitation. This presentation covers past and present application layer attacks against Tor. From practical hackin....
Attacking Tor at the Application Layer Gregory Fleischer Security Researcher Surfing the web using Tor makes you invincible, right? Wrong! Between the technical deficiencies, web browser idiosyncrasies, Tor vulnerabilities, social engineering, and bone-headed user decisions, there is ample room for attack and exploitation. This presentation covers past and present application layer attacks against Tor. From practical hackin....
Attacking Tor at the Application Layer Gregory Fleischer Security Researcher Surfing the web using Tor makes you invincible, right? Wrong! Between the technical deficiencies, web browser idiosyncrasies, Tor vulnerabilities, social engineering, and bone-headed user decisions, there is ample room for attack and exploitation. This presentation covers past and present application layer attacks against Tor. From practical hackin....
Clobbering the Cloud Haroon Meer Technical Director, SensePost Marco Slaviero Cyber Fighter, SensePost Nicholas Arvanitis Senior Security Analyst, SensePost Cloud Computing dominates the headlines these days but like most paradigm changes this introduces new risks and new opportunities for us to consider. Some deep technical research has gone into the underlying technologies (like Virtualization) but to some extent this serves on....
Clobbering the Cloud Haroon Meer Technical Director, SensePost Marco Slaviero Cyber Fighter, SensePost Nicholas Arvanitis Senior Security Analyst, SensePost Cloud Computing dominates the headlines these days but like most paradigm changes this introduces new risks and new opportunities for us to consider. Some deep technical research has gone into the underlying technologies (like Virtualization) but to some extent this serves on....
Clobbering the Cloud Haroon Meer Technical Director, SensePost Marco Slaviero Cyber Fighter, SensePost Nicholas Arvanitis Senior Security Analyst, SensePost Cloud Computing dominates the headlines these days but like most paradigm changes this introduces new risks and new opportunities for us to consider. Some deep technical research has gone into the underlying technologies (like Virtualization) but to some extent this serves on....
Down the Rabbit Hole: Uncovering a Criminal Server Iftach Ian Amit Director, Security Research, Aladdin In this talk I'll cover the research efforts done when we managed to come across a criminally operated server running the latest Neosploit (and other goodies). During the research there have been several crucial points of interest such as the discovery of compromised credentials, getting into the applications used by the crimi....
Down the Rabbit Hole: Uncovering a Criminal Server Iftach Ian Amit Director, Security Research, Aladdin In this talk I'll cover the research efforts done when we managed to come across a criminally operated server running the latest Neosploit (and other goodies). During the research there have been several crucial points of interest such as the discovery of compromised credentials, getting into the applications used by the crimi....
Down the Rabbit Hole: Uncovering a Criminal Server Iftach Ian Amit Director, Security Research, Aladdin In this talk I'll cover the research efforts done when we managed to come across a criminally operated server running the latest Neosploit (and other goodies). During the research there have been several crucial points of interest such as the discovery of compromised credentials, getting into the applications used by the crimi....
The Day of the Updates Itzik Kotler Security Operation Center Team Leader, Radware Tomer Bitton Security Researcher, Radware Software updates apply patches or introduce new features to an application. In most cases, the update procedure is conducted in an insecure manner, exposing the updater to execution of malicious code or to manipulation of application data such as anti-virus signatures. This presentation will describe in ....
The Day of the Updates Itzik Kotler Security Operation Center Team Leader, Radware Tomer Bitton Security Researcher, Radware Software updates apply patches or introduce new features to an application. In most cases, the update procedure is conducted in an insecure manner, exposing the updater to execution of malicious code or to manipulation of application data such as anti-virus signatures. This presentation will describe in ....
The Day of the Updates Itzik Kotler Security Operation Center Team Leader, Radware Tomer Bitton Security Researcher, Radware Software updates apply patches or introduce new features to an application. In most cases, the update procedure is conducted in an insecure manner, exposing the updater to execution of malicious code or to manipulation of application data such as anti-virus signatures. This presentation will describe in ....
Your Mind: Legal Status, Rights and Securing Yourself James "Myrcurial" Arlen Security Researcher Tiffany Rad President of ELCnetworks, LLC. and Adjunct Professor at University of Southern Maine's Computer Science Department As a participant in the information economy, you no longer exclusively own material originating from your organic brain; you leave a digital trail with your portable device's transmitted communications and when....
Your Mind: Legal Status, Rights and Securing Yourself James "Myrcurial" Arlen Security Researcher Tiffany Rad President of ELCnetworks, LLC. and Adjunct Professor at University of Southern Maine's Computer Science Department As a participant in the information economy, you no longer exclusively own material originating from your organic brain; you leave a digital trail with your portable device's transmitted communications and when....
Your Mind: Legal Status, Rights and Securing Yourself James "Myrcurial" Arlen Security Researcher Tiffany Rad President of ELCnetworks, LLC. and Adjunct Professor at University of Southern Maine's Computer Science Department As a participant in the information economy, you no longer exclusively own material originating from your organic brain; you leave a digital trail with your portable device's transmitted communications and when....
Advancing Video Application Attacks with Video Interception, Recording, and Replay Jason Ostrom Director, VIPER Lab Sipera Systems, Inc. Arjun Sambamoorthy Research Engineer, Sipera Systems, Inc. New video applications promise many exciting cost-saving benefits, but they also bring with them a host of security challenges and vulnerabilities. This session applies existing techniques for VoIP eavesdropping towards next generation att....
Advancing Video Application Attacks with Video Interception, Recording, and Replay Jason Ostrom Director, VIPER Lab Sipera Systems, Inc. Arjun Sambamoorthy Research Engineer, Sipera Systems, Inc. New video applications promise many exciting cost-saving benefits, but they also bring with them a host of security challenges and vulnerabilities. This session applies existing techniques for VoIP eavesdropping towards next generation att....
Advancing Video Application Attacks with Video Interception, Recording, and Replay Jason Ostrom Director, VIPER Lab Sipera Systems, Inc. Arjun Sambamoorthy Research Engineer, Sipera Systems, Inc. New video applications promise many exciting cost-saving benefits, but they also bring with them a host of security challenges and vulnerabilities. This session applies existing techniques for VoIP eavesdropping towards next generation att....
Cloud Security in Map/Reduce Jason Schlesinger Security Researcher This presentation is an overview of the operations principles of Map/Reduce and Hadoop with examples of typical implementation in a business environment. It points out significant security issues that now exist and others that will certainly arise. The presentation also offers suggestions for improving security in existing installations, and presents improvements to p..
Cloud Security in Map/Reduce Jason Schlesinger Security Researcher This presentation is an overview of the operations principles of Map/Reduce and Hadoop with examples of typical implementation in a business environment. It points out significant security issues that now exist and others that will certainly arise. The presentation also offers suggestions for improving security in existing installations, and presents improvements to p..
Cloud Security in Map/Reduce Jason Schlesinger Security Researcher This presentation is an overview of the operations principles of Map/Reduce and Hadoop with examples of typical implementation in a business environment. It points out significant security issues that now exist and others that will certainly arise. The presentation also offers suggestions for improving security in existing installations, and presents improvements to p..
That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....
That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....
That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....
The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....
The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....
The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....
1 2 3 5 8 11 17 25 37 54 79 116 170 249 365 532 534 783 895 1144 1146 1313 1429 1508 1562 1599 1601 1602 1603 1604 1605 1624 1641 1653 1661 1667 1670 1673 1675 1676 1677 1678 ▲ ▼
4 visitors online