Black Hat Asia 2019
2019-03-26..2019-03-29
Singapore, Singapore
[Black Hat Asia 2015, Black Hat Asia 2016, Black Hat Asia 2018, Black Hat Asia 2019, Black Hat Asia 2020, Black Hat Asia 2021, Black Hat Asia 2022, Black Hat Asia 2023]
| title | author | length |
|---|---|---|
| The Next Arms Race | Mikko Hypponen | 58m |
Claims that a global cyber arms race is already underway with the US and China emerging as dominant players, and that cyberweapons are effective, affordable… | ||
| CQTools: The New Ultimate Hacking Toolkit | Paula Januszkiewicz, Adrian Denkiewicz, Mike Jankowski-Lorek | 01h 02m |
CQURE packages 39 of its best tools from 200+ into CQTools and unveils 5 new ones that perform live and offline attacks: extracting SAM and NTDS.dit hashes… | ||
| Investigating Malware Using Memory Forensics - A Practical Approach | Monnappa K A | 01h 03m |
This presentation mainly focuses on the practical concept of memory forensics and shows how to use memory forensics to detect, investigate and understand the… | ||
| Zombie POODLE, GOLDENDOODLE, and How TLSv1.3 Can Save Us All | Craig Young | 41m |
Describes a scanner that finds CBC padding oracles across Alexa sites, reports ~3,689 observable vulnerable domains (~1.6% of top 100k) and ~5,800 likely… | ||
| Return of the Insecure Brazilian Voting Machines | Diego De Freitas Aranha | 55m |
Security analysis targets Brazil’s election system used by 140+ million voters, based on 2012 and 2017 hacking challenges. Findings include a hard-coded… | ||
| Office in Wonderland | Pieter Ceelen, Stan Hegt | 51m |
Shows specific exploits: include picture fields in .dot/.dotx templates force a basic‑auth credential prompt (CVE 0540) to harvest passwords; layered fields… | ||
| PASTA: Portable Automotive Security Testbed with Adaptability | Tsuyoshi Toyama, Takuya Yoshida, Hisashi Oguma, Tsutomu Matsumoto | 46m |
A portable automotive security testbed built into an ~8 kg suitcase reproduces multiple ECUs, exposes SWD/JTAG and OBD-II interfaces, and runs reprogrammable… | ||
| How to Survive the Hardware Assisted Control-Flow Integrity Enforcement | Jin Liu, Bing Sun, Chong Xu | 01h 05m |
Presentation analyzes Intel CET on Windows 10 RS5 and 19H1 and shows working PoCs that bypass protections despite CET: IBT is not yet enabled in shipping… | ||
| Keep Everyone In Sync: Effective Approaches Borrowed from Open Source Communities | Wang Kang | 49m |
Argues that old protocols still win: teams use PINE/Alpine email client and NNTP/RSS because archives are accessible and messages wait for you, not the… | ||
| iOS Dual Booting Demystified | Max Bazaliy | 51m |
Describes how to boot a custom iOS firmware image by loading a modified bootloader (uploaded over USB with iRecovery/minicom) that assembles a RAM disk, device… | ||
| Intel VISA: Through the Rabbit Hole | Maxim Goryachy, Mark Ermolov | 01h 00m |
With VISA, we succeeded in partially reconstructing the internal architecture of PCH and, within the chip, discovered dozens of devices that are invisible to… | ||
| Preloading Insecurity In Your Electron | Luca Carettoni | 48m |
Demonstrates concrete chains that turn an Electron XSS into RCE by abusing BrowserWindow preload: examples hijack Wire’s logger to write files (overwriting… | ||
| Winter is Coming Back | Yueqiang Cheng, Zhi Zhang, Surya Nepal, Zhi Wang | 40m |
Claims a reproducible exploit that defeats CAT-style physical isolation and gains root and kernel privileges by combining memory allocator grooming… | ||
| See Like a Bat: Using Echo-Analysis to Detect Man-in-the-Middle Attacks in LANs | Yisroel Mirsky | 21m |
Vesper is a plug-and-play detector that sends MLS-modulated ICMP bursts between hosts, records round‑trip times and jitter, deconvolves an impulse response and… | ||
| DevSecOps: What, Why and How | Anant Shrivastava | 39m |
In this talk, we focus on how a DevOps pipeline can easily be metamorphosed into DevSecOps, and we will identify the accompanying benefits . The talk will… | ||
| nothing matches | ||