Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat (Youtube)
Spectra: Breaking Separation Between Wireless Chips
Nowadays wireless technologies are increasingly sharing spectrum. This is the case for Wi-Fi and Bluetooth, but also some LTE bands and harmonics. Operating on the same frequency means that these different technologies need to coordinate wireless spectrum access to avoid collisions. Especially for nearby sources, as it is the case for multiple chips within one smartphone, so-called coexistence is the key to high-performance spectrum sharing.
By Jiska Classen and Francesco Gringoli
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#spectra-breaking-separation-between-wireless-chips-20005
Spectra: Breaking Separation Between Wireless Chips
Nowadays wireless technologies are increasingly sharing spectrum. This is the case for Wi-Fi and Bluetooth, but also some LTE bands and harmonics. Operating on the same frequency means that these different technologies need to coordinate wireless spectrum access to avoid collisions. Especially for nearby sources, as it is the case for multiple chips within one smartphone, so-called coexistence is the key to high-performance spectrum sharing.
By Jiska Classen and Francesco Gringoli
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#spectra-breaking-separation-between-wireless-chips-20005
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat (Youtube)
iOS Kernel PAC, One Year Later
In February 2019, I reported to Apple five ways to bypass kernel Pointer Authentication on the iPhone XS . My impression was that the design, while a dramatic improvement on the ARMv8.3 standard, had some fundamental issues when defending kernel control flow against attackers with kernel memory access. This talk will look at how PAC has (and hasn't) improved in the subsequent year, once again concluding with five new ways to bypass kernel PAC to obtain arbitrary kernel code execution on iOS 13.3.
By Brandon Azad
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#ios-kernel-pac-one-year-later-19726
iOS Kernel PAC, One Year Later
In February 2019, I reported to Apple five ways to bypass kernel Pointer Authentication on the iPhone XS . My impression was that the design, while a dramatic improvement on the ARMv8.3 standard, had some fundamental issues when defending kernel control flow against attackers with kernel memory access. This talk will look at how PAC has (and hasn't) improved in the subsequent year, once again concluding with five new ways to bypass kernel PAC to obtain arbitrary kernel code execution on iOS 13.3.
By Brandon Azad
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#ios-kernel-pac-one-year-later-19726
Media is too big
VIEW IN TELEGRAM
Black Hat (Youtube)
A Decade After Stuxnet's Printer Vulnerability: Printing is Still the Stairway to Heaven
In 2010, Stuxnet, the most powerful malware in the world revealed itself, causing physical damage to Iranian nuclear enrichment centrifuges. In order to reach Iran's centrifuges, it exploited a vulnerability in the Windows Print Spooler service to gain code execution as NT AUTHORITY\SYSTEM. Due to the hype around this critical vulnerability, we (and probably everyone else) were pretty sure that this attack surface would no longer exist a decade later. We were wrong…
By Peleg Hadar and Tomer Bar
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#a-decade-after-stuxnets-printer-vulnerability-printing-is-still-the-stairway-to-heaven-19685
A Decade After Stuxnet's Printer Vulnerability: Printing is Still the Stairway to Heaven
In 2010, Stuxnet, the most powerful malware in the world revealed itself, causing physical damage to Iranian nuclear enrichment centrifuges. In order to reach Iran's centrifuges, it exploited a vulnerability in the Windows Print Spooler service to gain code execution as NT AUTHORITY\SYSTEM. Due to the hype around this critical vulnerability, we (and probably everyone else) were pretty sure that this attack surface would no longer exist a decade later. We were wrong…
By Peleg Hadar and Tomer Bar
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#a-decade-after-stuxnets-printer-vulnerability-printing-is-still-the-stairway-to-heaven-19685
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Finding Hidden Login Endpoint Exposing Secret
1 minutes read
[Finding Hidden Login Endpoint Exposing Secret
Client ID](https://medium.com ``````...1 minutes read
Medium
Medium: Read and write stories.
On Medium, anyone can share insightful perspectives, useful knowledge, and life wisdom with the world.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Winja 2021 — Bad API — writeup](https://medium.com/@vinicius-fiorentino/winja
1 minutes read
[Winja 2021 — Bad API — writeup](https://medium.com/@vinicius-fiorentino/winja
```...
1 minutes read
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[What is a man-in-the-middle attack? How MITM attacks work](https://medium.com ``````...
1 minutes read
[What is a man-in-the-middle attack? How MITM attacks work](https://medium.com ``````...
1 minutes read
Medium
Medium: Read and write stories.
On Medium, anyone can share insightful perspectives, useful knowledge, and life wisdom with the world.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Hacking Series Part 16](https://medium.com/@alisyakainth/hacking-series-part- ``````...
1 minutes read
[Hacking Series Part 16](https://medium.com/@alisyakainth/hacking-series-part- ``````...
1 minutes read
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Directory Traversal Zafiyeti](https://medium.com/@erensagdicc/directory-trave ``````...
1 minutes read
[Directory Traversal Zafiyeti](https://medium.com/@erensagdicc/directory-trave ``````...
1 minutes read
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Deep Dive into Cover Protocol’s December 28, 2020 Exploit](https://medium.com
1 minutes read
[Deep Dive into Cover Protocol’s December 28, 2020 Exploit](https://medium.com
```...
1 minutes read
Medium
Medium: Read and write stories.
On Medium, anyone can share insightful perspectives, useful knowledge, and life wisdom with the world.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[HackTheBox Writeup — Passage](https://medium.com/@arkanoidctf/hackthebox-writ ``````...
1 minutes read
[HackTheBox Writeup — Passage](https://medium.com/@arkanoidctf/hackthebox-writ ``````...
1 minutes read
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Gaara 1 : VulnHub : Write-Up](https://medium.com/@ashanperera442a/gaara-1-vul ``````...
1 minutes read
[Gaara 1 : VulnHub : Write-Up](https://medium.com/@ashanperera442a/gaara-1-vul ``````...
1 minutes read