Security
5,347 items in 29 lists
-
Inducing DNS Leaks in Onion Web Services github.com
-
X-Frame-Options: All about Clickjacking? github.com
-
A glimpse into GitHub's Bug Bounty workflow github.blog
-
GitHub's post-CSP journey github.blog
-
GitHub's CSP journey github.blog
-
The Absurdly Underestimated Dangers of CSV Injection georgemauer.net
-
-
FOFA fofa.so
-
FLAWS flaws.cloud
-
IE11 Information disclosure - local file detection facebook.com
-
File Upload Restrictions Bypass exploit-db.com
-
MySQL Error Based SQL Injection Using EXP exploit-db.com
-
C.XSS Guide excess-xss.com
-
How to Hunt Bugs in SAML; a Methodology - Part III epi052.gitlab.io
-
How to Hunt Bugs in SAML; a Methodology - Part II epi052.gitlab.io
-
How to Hunt Bugs in SAML; a Methodology - Part I epi052.gitlab.io
-
Remote Exploitation of Honda Cars youtube.com
The Honda Connect app used by Honda City 5th generation used weak security mechanisms in its APIs for access control which would allow a malicious user to perform actions like starting the car, locking/unlocking car etc. remotely by interacting with it's Telematics Control Unit…
-
CCC - Horror Stories From the Automotive Industry youtube.com
Horrifying examples of common vulnerabilities in the automotive industry, result of more than 100 penetration tests targeting Tier 1 suppliers and OEMs, with ultimate goal to raise awareness on the current state of automotive security. Additionally, PoC of automated week seed…
-
Can You Trust Autonomous Vehicles? youtube.com
DEFCON 24 talk by Jianhao Liu, Chen Yan, Wenyuan Xu
-
Adventures in Automotive Networks and Control Units youtube.com
DEFCON 21 talk by Chris Valasek and Charlie Miller on automotive networks.
-
State of Automotive Cyber Safety, 2015 youtube.com
State of automotive hacking, policy, industry changes, etc. from I Am The Cavalry track at BSides Las Vegas, 2015.
-
TR22: UDS Fuzzing and the Path to Game Over youtube.com
UDS diagnostics protocol fuzzing methodology, presented as a result of numerous penetration testing projects in the automotive industry, with real world exploitation PoCs, presented during Troopers Conference 2022.
-
Hacking Back Your Car youtube.com
Kamel Ghali's talk on ROOTCON 17 about how an attacker's perspective on hacking a car and origins of such attacks, how they've been used in different countries over the years, and explore the technical details of what makes such an attack possible.
-
Analysis and Defense of Automotive Networks youtube.com
Overview of CAN, security, and potential intrusion detection approaches at BSides Knoxville 2020
-
Ken Munro & Dave Lodge - Hacking the Mitsubishi Outlander & IOT youtube.com
talk from BSides Manchester 2016 by Ken and Dave of Pen Test Partners
-
State of Automotive Cyber Safety, 2016 youtube.com
State of automotive hacking, policy, industry changes, etc. from I Am The Cavalry track at BSides Las Vegas, 2016.
-
DEF CON CHV - V2GEvil: Ghost in the wires youtube.com
Shortened and summarized version of the talk V2GEvil: Ghost in the wires, from the DEF CON 32 Car Hacking Village, by Pavel Khunt and Thomas Sermpinis.
-
Car Hacking 101 youtube.com
Bugcrowd LevelUp 2017 by Alan Mond
-
Remote Exploitation of an Unaltered Passenger Vehicle youtube.com
DEFCON 23 talk Chris Valasek and Charlie Miller give their now famous talk on hacking into a Jeep remotely and stopping it dead in its tracks.
-
An overview of Automotive Defensive Engineering youtube.com
This talk is for car hackers to learn about modern defense measures being added to ECUs and Vehicle Architectures. This was presented in ROOTCON 17 Car Hacking Village.
-
The hack, the crash and two smoking barrels. (And all the times I (almost) killed an engineer.) youtube.com
Thomas Sermpinis goes through the process of responsibly disclosing findings affecting the Blind Spot Detection Sensor of a current MY vehicle from one of the biggest OEMs in the world, leading to accusations that he was collaborating with hostile nations by the OEM. A story…
-
A Survey of Remote Automotive Attack Surfaces youtube.com
Black Hat talk By Charlie Miller and Chris Valasek. Automotive security concerns have gone from the fringe to the mainstream with security researchers showing the susceptibility of the modern vehicle to local and remote attacks. Discussion of vehicle attack surfaces. 2014.
-
How to Hack a Tesla Model S youtube.com
DEF CON 23 talk by Marc Rogers and Kevin Mahaffey on hacking a Tesla. Tesla Co-Founder and CTO, JB Straubel, joins them to thank them and present a challenge coin.
-
How to drift with any car youtube.com
Introduction to CAN hacking, and using a real car as an Xbox controller.
-
Car Hacking Scene in the PH: How Far We've Come youtube.com
Car Hacking Village PH presents their first attempt on the main tracks for ROOTCON. This is a rundown of CHVPH's past security research to current research - from hacking infotainment systems to CAN Bus protocols and a summary of cars available in the Philippines which are…
-
TR23: V2GEvil: Ghost in the wires youtube.com
This research is dedicated to enhancing the cybersecurity of electric vehicles, with a specific focus on identifying vulnerabilities in the Electric Vehicle Communication Controller (EVCC), and an introduction to the tool V2GEvil. Accessible through the On-Board Charging (OBC)…
-
ECU Reflashing Detector Demo youtube.com
-
Zenduty zenduty.com
Zenduty is a novel incident management platform providing end-to-end incident alerting, on-call management and response orchestration, giving teams greater control and automation over the incident management lifecycle.
-
The Future of Incident Response youtube.com
Presented by Bruce Schneier at OWASP AppSecUSA 2015.
-
Yomi yomi.yoroi.company
Free MultiSandbox managed and hosted by Yoroi.
-
Car Infotainment Hacking Methodology and Attack Surface Scenario youtube.com
A guide on how to attack, hunt bugs or hack your IVI by Jay Turla which was presented at the Packet Hacking Village / Wall of Sheep during DEF CON 26.
-
X-Ways Forensics x-ways.net
Forensics tool for Disk cloning and imaging. It can be used to find deleted files and disk analysis.
-
WindowsSCOPE windowsscope.com
Memory forensics and reverse engineering tool used for analyzing volatile memory offering the capability of analyzing the Windows kernel, drivers, DLLs, and virtual and physical memory.
-
Self-Driving and Connected Cars: Fooling Sensors and Tracking Drivers youtube.com
Black Hat talk by Jonathan Petit. Automated and connected vehicles are the next evolution in transportation and will improve safety, traffic efficiency and driving experience. This talk will be divided in two parts: 1) security of autonomous automated vehicles and 2) privacy of…
-
Valkyrie Comodo valkyrie.comodo.com
Valkyrie uses run-time behavior and hundreds of features from a file to perform analysis.
-
CAN DoS Fuzzing Attack Video youtube.com
-
The ESF Playground themittenmac.com
A tool to view the events in Apple Endpoint Security Framework (ESF) in real time.
-
TR19: Automotive Penetration Testing with Scapy youtube.com
Overview on how Scapy can be used for automotive penetration testing at Troopers Conference 2019.
-
Analysis of an In-vehicular network: From CAN bus to infotainment youtube.com
This talk will feature Div0 CSQ’s 3 test benches as they explore more features on Connected vehicles. This was presented in ROOTCON 17 Car Hacking Village.
-
Kaspersky CyberTrace support.kaspersky.com
Threat intelligence fusion and analysis tool that integrates threat data feeds with SIEM solutions. Users can immediately leverage threat intelligence for security monitoring and incident report (IR) activities in the workflow of their existing security operations.
- next page of items loading…
