36C3: Resource Exhaustion

Hacking an NFC toy with the ChameleonMini

• Security WikiPakaWG
• 13 min
• 2019-12-30
• 11141
• fptrs and ceres-c

Breaking Microsoft Edge Extensions Security Policies

• Security Main
• 30 min
• 2019-12-28
• 606
• Nikhil Mittal

Harry Potter and the Not-So-Smart Proxy War

Taking a look at a covert CIA virtual fencing solution

• Security Main
• 35 min
• 2019-12-28
• 6895
• Jos Wetzels

Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale

• Security Main
• 36 min
• 2019-12-28
• 699
• Nilo Redini

Hacking (with) a TPM

Don't ask what you can do for TPMs, Ask what TPMs can do…

• Security Main
• 37 min
• 2019-12-29
• 3204
• Andreas Fuchs

All wireless communication stacks are equally broken

• Security Main
• 38 min
• 2019-12-28
• 9536
• jiska

The One Weird Trick SecureROM Hates

• Security Main
• 38 min
• 2019-12-29
• 3990
• qwertyoruiop

Tales of old: untethering iOS 11

Spoiler: Apple is bad at patching

• Security Main
• 39 min
• 2019-12-27
• 8276
• littlelailo

The Great Escape of ESXi

Breaking Out of a Sandboxed Virtual Machine

• Security Main
• 40 min
• 2019-12-27
• 5877
• f1yyy

15 Jahre deutsche Telematikinfrastruktur (TI)

Die Realität beim Arztbesuch nach 15 Jahren Entwicklung…

• Security Main
• 41 min
• 2019-12-29
• 4156
• Christoph Saatjohann

Practical Cache Attacks from the Network and Bad Cat Puns

• Security Main
• 42 min
• 2019-12-27
• 1056
• Michael Kurth

Hirne Hacken

Menschliche Faktoren der IT-Sicherheit

• Security Main
• 43 min
• 2019-12-29
• 48261
• Linus Neumann

The sustainability of safety, security and privacy

• Security Main
• 43 min
• 2019-12-28
• 7250
• Ross Anderson

It's not safe on the streets... especially for your 3DS!

Exploring a new attack surface on the 3DS

• Security Main
• 46 min
• 2019-12-27
• 3040
• nba::yoh

SELECT code_execution FROM * USING SQLite;

--Gaining code execution using a malicious SQLite database

• Security Main
• 46 min
• 2019-12-27
• 9538
• OmerGull

Don't Ruck Us Too Hard - Owning Ruckus AP Devices

3 different RCE vulnerabilities on Ruckus Wireless access…

• Security Main
• 48 min
• 2019-12-28
• 900
• Gal Zror

Hacking Sony PlayStation Blu-ray Drives

• Security Main
• 49 min
• 2019-12-28
• 3975
• oct0xor

Plundervolt: Flipping Bits from Software without Rowhammer

• Security Main
• 49 min
• 2019-12-27
• 7780
• Daniel Gruss and Kit Murdock

Leaving legacy behind

Reducing carbon footprint of network services with MirageOS…

• Security Main
• 52 min
• 2019-12-27
• 10258
• Hannes Mehnert

(Post-Quantum) Isogeny Cryptography

• Security Main
• 52 min
• 2019-12-27
• 5256
• naehrwert

A systematic evaluation of OpenBSD's mitigations

• Security Main
• 53 min
• 2019-12-29
• 5346
• stein

Cryptography demystified

An introduction without maths

• Security Main
• 53 min
• 2019-12-29
• 3309
• oots

KTRW: The journey to build a debuggable iPhone

• Security Main
• 54 min
• 2019-12-28
• 1358
• Brandon Azad

SigOver + alpha

Signal overshadowing attack on LTE and its applications

• Security Main
• 55 min
• 2019-12-28
• 1065
• CheolJun Park and Mincheol Son

Vehicle immobilization revisited

Uncovering and assessing a second authentication mechanism…

• Security Main
• 55 min
• 2019-12-28
• 1635
• Wouter Bokslag

ZombieLoad Attack

Leaking Your Recent Memory Operations on Intel CPUs

• Security Main
• 55 min
• 2019-12-28
• 1438
• Michael Schwarz, Moritz Lipp and Daniel Gruss

Uncover, Understand, Own - Regaining Control Over Your AMD CPU

• Security Main
• 56 min
• 2019-12-27
• 5884
• Robert Buhren, Alexander Eichner and Christian Werling

How to Break PDFs

Breaking PDF Encryption and PDF Signatures

• Security Main
• 58 min
• 2019-12-27
• 7278
• Fabian Ising and Vladislav Mladenov

TamaGo - bare metal Go framework for ARM SoCs.

Reducing the attack surface with pure embedded Go.

• Security Main
• 59 min
• 2019-12-28
• 1217
• Andrea Barisani

No source, no problem! High speed binary fuzzing

• Security Main
• 59 min
• 2019-12-29
• 1863
• Nspace and gannimo

What's left for private messaging?

• Security Main
• 60 min
• 2019-12-27
• 41821
• Will Scott

Intel Management Engine deep dive

Understanding the ME at the OS and hardware level

• Security Main
• 60 min
• 2019-12-27
• 6198
• Peter Bosch

On the insecure nature of turbine control systems in power generation

A security study of turbine control systems in power…

• Security Main
• 60 min
• 2019-12-28
• 4309
• repdet, @_moradek_ and c0rs

"Hacker hin oder her": Die elektronische Patientenakte kommt!

• Security Main
• 60 min
• 2019-12-27
• 21846
• Martin Tschirsich, cbro - Dr. med. Christian Brodowski and Dr. André Zilch

High-assurance crypto software

• Security Main
• 61 min
• 2019-12-29
• 2324
• djb and Tanja Lange

Messenger Hacking: Remotely Compromising an iPhone through iMessage

• Security Main
• 61 min
• 2019-12-27
• 29562
• Samuel Groß

Email authentication for penetration testers

When SPF is not enough

• Security Main
• 61 min
• 2019-12-29
• 3491
• Andrew Konstantinov

Boot2root

Auditing Boot Loaders by Example

• Security Main
• 62 min
• 2019-12-29
• 1850
• Ilja van Sprundel and Joseph Tartaro

A Deep Dive Into Unconstrained Code Execution on Siemens S7 PLCs

• Security Main
• 62 min
• 2019-12-27
• 2628
• Ali Abbasi and Tobias Scharnowski

Das nützlich-unbedenklich Spektrum

Können wir Software bauen, die nützlich /und/ unbedenklich…

• Security Main
• 63 min
• 2019-12-28
• 16001
• Fefe