Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Hack The Textbook Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Mike Cooper Senior Security Engineer, IPC Systems Hack the Textbook: Introducing The Textbook Security Project Why do we have so many software security problems? Clearly, a large proportion are caused by poorly written code. Why is our code so badly written? There are many reasons, not the least of which is that writing secure....

Deblaze - A Remote Method Enumeration Tool for Flex Servers Jon Rose Trustwave This talk will provide a basic overview of Flash remoting and cover some of the security issues found in real-world flash applications and demonstrate a new tool for testing flash applications. Flash applications can make request to a remote server to call server side functions, such as looking up accounts, retrieving additional data and graphics, and....

Deblaze - A Remote Method Enumeration Tool for Flex Servers Jon Rose Trustwave This talk will provide a basic overview of Flash remoting and cover some of the security issues found in real-world flash applications and demonstrate a new tool for testing flash applications. Flash applications can make request to a remote server to call server side functions, such as looking up accounts, retrieving additional data and graphics, and....

Deblaze - A Remote Method Enumeration Tool for Flex Servers Jon Rose Trustwave This talk will provide a basic overview of Flash remoting and cover some of the security issues found in real-world flash applications and demonstrate a new tool for testing flash applications. Flash applications can make request to a remote server to call server side functions, such as looking up accounts, retrieving additional data and graphics, and....

Advanced SQL Injection Joseph McCray Founder of Learn Security Online SQL Injection is a vulnerability that is often missed by web application security scanners, and it's a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited. Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must pro....

Advanced SQL Injection Joseph McCray Founder of Learn Security Online SQL Injection is a vulnerability that is often missed by web application security scanners, and it's a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited. Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must pro....

Advanced SQL Injection Joseph McCray Founder of Learn Security Online SQL Injection is a vulnerability that is often missed by web application security scanners, and it's a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited. Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must pro....

Hacking the Wiimote and Wii Fit to Help the Disabled Josh Marks Rob Rehrig Larry Aiello People like Johnny Chung Lee have shown us that the Wiimote can be used as a bluetooth IR camera that tracks the spatial location of up to four IR LEDs. Applying this work to a new application, we have adapted the Wiimote and the Wii Fit into a low cost system to help disabled individuals to interface with a computer. By combining the movement....

Hacking the Wiimote and Wii Fit to Help the Disabled Josh Marks Rob Rehrig Larry Aiello People like Johnny Chung Lee have shown us that the Wiimote can be used as a bluetooth IR camera that tracks the spatial location of up to four IR LEDs. Applying this work to a new application, we have adapted the Wiimote and the Wii Fit into a low cost system to help disabled individuals to interface with a computer. By combining the movement....

Hacking the Wiimote and Wii Fit to Help the Disabled Josh Marks Rob Rehrig Larry Aiello People like Johnny Chung Lee have shown us that the Wiimote can be used as a bluetooth IR camera that tracks the spatial location of up to four IR LEDs. Applying this work to a new application, we have adapted the Wiimote and the Wii Fit into a low cost system to help disabled individuals to interface with a computer. By combining the movement....

Unmasking You Joshua "Jabra" Abraham Security Expert at Rapid7 Robert "RSnake" Hansen CEO, Founder of SecTheory Many people and organizations depend upon proxies and numerous other privacy techniques to mask their true identity. The problem is there are often flaws within these technologies. This talk will demonstrate several of these flaws and as well as weaknesses in well known implementations. There will be several new anti-priv....

Unmasking You Joshua "Jabra" Abraham Security Expert at Rapid7 Robert "RSnake" Hansen CEO, Founder of SecTheory Many people and organizations depend upon proxies and numerous other privacy techniques to mask their true identity. The problem is there are often flaws within these technologies. This talk will demonstrate several of these flaws and as well as weaknesses in well known implementations. There will be several new anti-priv....

Unmasking You Joshua "Jabra" Abraham Security Expert at Rapid7 Robert "RSnake" Hansen CEO, Founder of SecTheory Many people and organizations depend upon proxies and numerous other privacy techniques to mask their true identity. The problem is there are often flaws within these technologies. This talk will demonstrate several of these flaws and as well as weaknesses in well known implementations. There will be several new anti-priv....

Old Skool Brought Back: A 1964 Modem Demo K.C. Budd "Phreakmonkey" Security Researcher Taylor Banks "Dr Kaos" Security Researcher Eighteen years ago I was given a curious device: An Acoustic Coupled modem in a wooden box. I've kept it over the years and recently rediscovered it. Thanks to the recent invention of the web, I am now able to discover something about its history; I may have the oldest working modem on the planet! At thi....

Old Skool Brought Back: A 1964 Modem Demo K.C. Budd "Phreakmonkey" Security Researcher Taylor Banks "Dr Kaos" Security Researcher Eighteen years ago I was given a curious device: An Acoustic Coupled modem in a wooden box. I've kept it over the years and recently rediscovered it. Thanks to the recent invention of the web, I am now able to discover something about its history; I may have the oldest working modem on the planet! At thi....

Old Skool Brought Back: A 1964 Modem Demo K.C. Budd "Phreakmonkey" Security Researcher Taylor Banks "Dr Kaos" Security Researcher Eighteen years ago I was given a curious device: An Acoustic Coupled modem in a wooden box. I've kept it over the years and recently rediscovered it. Thanks to the recent invention of the web, I am now able to discover something about its history; I may have the oldest working modem on the planet! At thi....




Hacking the Apple TV and Where your Forensic Data Lives Kevin Estis Security Researcher Randy Robbins Security Researcher This is a primer for both newbie Apple TV hackers and digital forensics investigators. The intent of the presentation is to show how easy it is to modify an Apple TV to run 3rd-party applications and also point out where the Apple TV tracks your activities (including files played, applications installed, and con..

Hacking the Apple TV and Where your Forensic Data Lives Kevin Estis Security Researcher Randy Robbins Security Researcher This is a primer for both newbie Apple TV hackers and digital forensics investigators. The intent of the presentation is to show how easy it is to modify an Apple TV to run 3rd-party applications and also point out where the Apple TV tracks your activities (including files played, applications installed, and con..

Hacking the Apple TV and Where your Forensic Data Lives Kevin Estis Security Researcher Randy Robbins Security Researcher This is a primer for both newbie Apple TV hackers and digital forensics investigators. The intent of the presentation is to show how easy it is to modify an Apple TV to run 3rd-party applications and also point out where the Apple TV tracks your activities (including files played, applications installed, and con..

Injectable Exploits: Two New Tools for Pwning Web Apps and Browsers Kevin Johnson Senior Security Analyst, InGuardians Justin Searle Senior Security Analyst, InGuardians Frank DiMaggio Security Researcher Injectable exploits focus on the exploitation of major web flaws during penetration tests. Two new tools will be released that expand the foothold penetration testers can obtain through SQL injection and XSS flaws. These tools p....

Injectable Exploits: Two New Tools for Pwning Web Apps and Browsers Kevin Johnson Senior Security Analyst, InGuardians Justin Searle Senior Security Analyst, InGuardians Frank DiMaggio Security Researcher Injectable exploits focus on the exploitation of major web flaws during penetration tests. Two new tools will be released that expand the foothold penetration testers can obtain through SQL injection and XSS flaws. These tools p....

Injectable Exploits: Two New Tools for Pwning Web Apps and Browsers Kevin Johnson Senior Security Analyst, InGuardians Justin Searle Senior Security Analyst, InGuardians Frank DiMaggio Security Researcher Injectable exploits focus on the exploitation of major web flaws during penetration tests. Two new tools will be released that expand the foothold penetration testers can obtain through SQL injection and XSS flaws. These tools p....

Is your Iphone Pwned? Auditing, Attacking and Defending Mobile Devices Kevin Mahaffey co-founder and CTO of Flexilis John Hering co-founder of Flexilis Mobile Security Anthony Lineberry Security Researcher The world has never been more connected. Over a billion mobile devices ship every year, five times the number of PCs in the same period. The iPhone and Android have accelerated the mass adoption of smart devices, mobile applica....

Is your Iphone Pwned? Auditing, Attacking and Defending Mobile Devices Kevin Mahaffey co-founder and CTO of Flexilis John Hering co-founder of Flexilis Mobile Security Anthony Lineberry Security Researcher The world has never been more connected. Over a billion mobile devices ship every year, five times the number of PCs in the same period. The iPhone and Android have accelerated the mass adoption of smart devices, mobile applica....

Is your Iphone Pwned? Auditing, Attacking and Defending Mobile Devices Kevin Mahaffey co-founder and CTO of Flexilis John Hering co-founder of Flexilis Mobile Security Anthony Lineberry Security Researcher The world has never been more connected. Over a billion mobile devices ship every year, five times the number of PCs in the same period. The iPhone and Android have accelerated the mass adoption of smart devices, mobile applica....

Effective Information Security Career Planning Lee Kushner President, LJ Kushner and Associates, Founder InfoSecLeaders.com Mike Murray President, Michael Murray and Associates, Founder InfoSecLeaders.com Even with the downturn in the economy, Information Security is becoming an increasingly popular profession. It is evident that the number of talented Information Security professionals greatly outnumbers Information Security leade....

Effective Information Security Career Planning Lee Kushner President, LJ Kushner and Associates, Founder InfoSecLeaders.com Mike Murray President, Michael Murray and Associates, Founder InfoSecLeaders.com Even with the downturn in the economy, Information Security is becoming an increasingly popular profession. It is evident that the number of talented Information Security professionals greatly outnumbers Information Security leade....

Effective Information Security Career Planning Lee Kushner President, LJ Kushner and Associates, Founder InfoSecLeaders.com Mike Murray President, Michael Murray and Associates, Founder InfoSecLeaders.com Even with the downturn in the economy, Information Security is becoming an increasingly popular profession. It is evident that the number of talented Information Security professionals greatly outnumbers Information Security leade....

30k Feet Look at WiFi Luiz "effffn" Eduardo Although inflight wee-fee service is really nothing new... (some airlines have had it for a while, some even already gave-up on the service), in the past year it's got some traction again with the release of the service by some airlines in the US and some other countries. The talk will cover things like wi-fi infrastructure, auth stuff, spectrum analysis, protection mechanisms (if any), gen....

30k Feet Look at WiFi Luiz "effffn" Eduardo Although inflight wee-fee service is really nothing new... (some airlines have had it for a while, some even already gave-up on the service), in the past year it's got some traction again with the release of the service by some airlines in the US and some other countries. The talk will cover things like wi-fi infrastructure, auth stuff, spectrum analysis, protection mechanisms (if any), gen....

30k Feet Look at WiFi Luiz "effffn" Eduardo Although inflight wee-fee service is really nothing new... (some airlines have had it for a while, some even already gave-up on the service), in the past year it's got some traction again with the release of the service by some airlines in the US and some other countries. The talk will cover things like wi-fi infrastructure, auth stuff, spectrum analysis, protection mechanisms (if any), gen....

Invisible Access: Electronic Access Control, Audit Trails and "High Security" Marc Weber Tobias Investigative Attorney and Security Specialist, Security.org Matt Fiddler Security Specialist, Security.org Tobias Bluzmanis Security Specialist, Security.org This presentation will include a detailed review regarding the protection of high security facilities, including airports and aircraft, power transmission facilities, and data ce....

Invisible Access: Electronic Access Control, Audit Trails and "High Security" Marc Weber Tobias Investigative Attorney and Security Specialist, Security.org Matt Fiddler Security Specialist, Security.org Tobias Bluzmanis Security Specialist, Security.org This presentation will include a detailed review regarding the protection of high security facilities, including airports and aircraft, power transmission facilities, and data ce....

Invisible Access: Electronic Access Control, Audit Trails and "High Security" Marc Weber Tobias Investigative Attorney and Security Specialist, Security.org Matt Fiddler Security Specialist, Security.org Tobias Bluzmanis Security Specialist, Security.org This presentation will include a detailed review regarding the protection of high security facilities, including airports and aircraft, power transmission facilities, and data ce....

Dangerous Minds: The Art of Guerrilla Data Mining Mark Ryan Del Moral Talabis Senior Consultant, Secure-DNA Consulting It is not a secret that in today's world, information is as valuable or maybe even more valuable that any security tool that we have out there. Information is the key. That is why the US Information Awareness Office's (IAO) motto is "scientia est potential", which means "knowledge is power". The IAO just like the CIA....

Dangerous Minds: The Art of Guerrilla Data Mining Mark Ryan Del Moral Talabis Senior Consultant, Secure-DNA Consulting It is not a secret that in today's world, information is as valuable or maybe even more valuable that any security tool that we have out there. Information is the key. That is why the US Information Awareness Office's (IAO) motto is "scientia est potential", which means "knowledge is power". The IAO just like the CIA....

Dangerous Minds: The Art of Guerrilla Data Mining Mark Ryan Del Moral Talabis Senior Consultant, Secure-DNA Consulting It is not a secret that in today's world, information is as valuable or maybe even more valuable that any security tool that we have out there. Information is the key. That is why the US Information Awareness Office's (IAO) motto is "scientia est potential", which means "knowledge is power". The IAO just like the CIA....

0-day, gh0stnet and the inside story of the Adobe JBIG2 vulnerability Matt Richard Malicious Code Researcher, Raytheon Steven Adair Researcher, Shadowserver This talk is the story of 0-day PDF attacks, the now famous gh0stnet ring and the disclosure debacle of the Adobe JBIG2 vulnerability in January and February 2009. This is the story of international cyber-espionage using 0-days and the fierce debate over how to defend networks ....

0-day, gh0stnet and the inside story of the Adobe JBIG2 vulnerability Matt Richard Malicious Code Researcher, Raytheon Steven Adair Researcher, Shadowserver This talk is the story of 0-day PDF attacks, the now famous gh0stnet ring and the disclosure debacle of the Adobe JBIG2 vulnerability in January and February 2009. This is the story of international cyber-espionage using 0-days and the fierce debate over how to defend networks ....

Cracking 400,000 Passwords, or How to Explain to Your Roommate why the Power Bill is a Little High… Matt Weir PhD Student, Florida State University Professor Sudhir Aggarwal Florida State University Remember when phpbb.com was hacked in January and over 300,000 usernames and passwords were disclosed? Don't worry though, the hacker only tried to crack a third of them, (dealing with big password lists is a pain), and of those he/she ....

Cracking 400,000 Passwords, or How to Explain to Your Roommate why the Power Bill is a Little High… Matt Weir PhD Student, Florida State University Professor Sudhir Aggarwal Florida State University Remember when phpbb.com was hacked in January and over 300,000 usernames and passwords were disclosed? Don't worry though, the hacker only tried to crack a third of them, (dealing with big password lists is a pain), and of those he/she ....

3 visitors online