The Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking
summary
Claims live demos of real bypasses against services like Grab Slack Microsoft Facebook Mapbox Instagram PayPal Glassdoor Finja and ShapeShift and shows working exploit chains rather than theory, using Burp Suite and custom scripts to spoof origins and flood endpoints, extract TOTP secrets from app binaries, decrypt and replay responses, and brute force 11 million IPs spoofed to win an OTP. Includes a measured finding that three out of ten apps accept random backup codes and practical PoCs that result in full account takeover.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 2:14Two-factor authentication
- 7:13Brute force on TFA
- 13:20Broken session management
- 20:34Cross-site request forgery in TFA
- 26:04Input parameter bypass
- 28:10Response manipulation
- 32:24Case study: response code
- 36:33Backup codes bypass
- 39:03Social logins MFA bypass
- 40:53Bypassing MFA beyond TFA
- 43:25Research insights
related talks
58mSocial Engineering: Hacking Humans
56mHacking your Mind and Emotions
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
57mEnterprise Ethical Hacking Cloud Applications
47mLive Hacking: Breaking into Your Web App
39mHow to think like a hacker
38mHacking Demos, Dirty Secrets, Dangerous Lies, Asset Intelligence
01h 06mHow hacking works