Hack In The Box Security Conference Talks & Presentations

Hack In The Box Security Conference

Binder - The Bridge To Root - Hongli Han and Mingjian Zhou

Exploración detallada de la vulnerabilidad "Waterdrop" en el controlador Binder de Android, que permite escalar privilegios y obtener acceso root en dispositivos populares, incluyendo los Pixel más recientes.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Sneaking Past Device Guard

Exploración de técnicas avanzadas para eludir Device Guard en Windows 10, incluyendo métodos que requieren privilegios de administrador y otros que utilizan aplicaciones nativas del sistema operativo.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

A Successful Mess Between Hardening and Mitigation

In-depth analysis of Content Security Policy for XSS prevention, exploring its effectiveness, debunking myths, and sharing real-world data on successful XSS mitigation in sensitive applications.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Researching New Attack Interfaces on iOS and OSX

Exploración de nuevas interfaces de ataque en iOS y OSX, revelando vulnerabilidades del kernel y controladores mediante ingeniería inversa, análisis estático/dinámico y fuzzing mejorado.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Overcoming Fear - Reversing With Radare2

Comprehensive guide to reversing with Radare2, covering installation, basic commands, visual modes, configuration, and practical applications. Suitable for beginners and professionals in computer security.

• YouTube
• 2 hours 5 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Duplicating Black Box Machine Learning Models

Exploración de técnicas avanzadas para duplicar modelos de aprendizaje automático de caja negra, destacando vulnerabilidades en servicios en la nube y proponiendo un nuevo método de ataque más eficiente.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Finding Vulnerabilities in iOS - MacOS Networking Code

Explore iOS/macOS networking vulnerabilities, focusing on mbuf processing in XNU kernel. Learn about network packet structures, vulnerability discovery techniques, and PoC exploit development.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

TOCTOU Attacks Against Secure Boot and BootGuard

Explore TOCTOU attacks on Intel's BootGuard, learn about vulnerabilities in secure boot processes, and discover open-source tools for testing system security.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Hourglass Fuzz - A Quick Bug Hunting Method

Introducción a Hourglass Fuzz, un método rápido de búsqueda de errores para Android que supera las limitaciones de los sistemas de fuzzing típicos, con ejemplos de vulnerabilidades descubiertas en controladores gráficos y Bluetooth.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Hey Attacker! I Can See You!

Exploring cloud-scale deception technology to track and analyze attackers, enhancing Azure security through psychological and technical approaches for better threat intelligence and user protection.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

WiCy - Monitoring 802.11AC Networks At Scale

Explore challenges in 802.11ac network monitoring and learn to create a custom monitoring platform using repurposed access point hardware. Gain practical knowledge and scripts for implementation.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Rise of the WarPi

Explore WarRoaming techniques, custom gear, and strategies for efficient WiFi discovery. Learn from a top-ranked WiGLE.net contributor's journey and insights into wireless surveying and intelligence gathering.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Hacking LTE Public Warning Systems

Exploring vulnerabilities in LTE Public Warning Systems, demonstrating how fake emergency alerts can be created using low-cost hardware, potentially causing panic or system paralysis.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Infrared - Old Threat Meets New Devices

Exploring infrared technology's resurgence in smart devices, examining potential security vulnerabilities, and demonstrating innovative attack vectors using IR transmitters and receivers.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Taking Over Telecom Networks

Explore telecom network vulnerabilities, attack vectors, and security best practices in this comprehensive overview of mobile infrastructure risks.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk