ViewTube

C2 servers of mobile and Windows malware are usually left to their own fate after they have been discovered and the malware is ...

Many have heard about Prototype Pollution vulnerabilities in JavaScript applications. This kind of vulnerability allows an attacker ...

Remember that web application you wrote when you where first learning PHP? Ever wonder how vulnerable that code base is?

In this talk I will show how to reverse engineer a proprietary HTTP Server in order to leverage memory corruption vulnerabilities ...

The presented attack results in an unfixable compromise of the Starlink UT and allows us to execute arbitrary code. Obtaining root ...

Everyone knows that databases are the crown jewels from a hacker's point of view, but what if you could use a database as the ...

MS-RPC is Microsoft's implementation of the Remote Procedure Calls protocol. Even though the protocol is extremely widespread ...

You might think that as long as you never hit run, opening up that interesting new POC in your IDE and checking out the code is ...

The DEF CON 27 badge employed an obscure form of wireless communication: Near Field Magnetic Inductance (NFMI).

Chromium is not only the most popular browser in the world but also one of the most widely integrated supply chain components.

This new technique allowed attackers to sidestep codesigning, ASLR, and all other mitigations to execute arbitrary code on Apple ...

... either via feature or misconfiguration of Deep Link or Open redirect or XSS it would lead to Remote Code Execution on the OS.

A new wave of attacks has targeted CentreStack and Triofox servers using an unpatched Local File Inclusion vulnerability ...

PBX (Private Branch Exchange) and UC (Unified Communications) servers are the big communication brokers in enterprise ...

eBPF (or "extended" Berkeley Packet Filter) is a bytecode instruction set and virtual machine used as a safe computing ...

Techniques for transforming memory corruption primitives into arbitrary code execution exploits have evolved significantly over ...

Finally, we'll describe how to construct an exploit that achieves remote code execution without the need for memory corruption.

2014 was a year of unprecedented participation in crowdsourced and static bug bounty programs, and 2015 looks like a ...

Openness to responsibly disclosed external vulnerability research is crucial for modern software maintainers and security teams.

It can be exploited both locally and remotely, escapes sandbox, executes arbitrary code, and also elevates to SYSTEM.