nullcon Talks & Presentations

nullcon

Elements of a Successful Security Strategy - A Comprehensive Approach

Expert panel discusses key components of effective cybersecurity strategies, offering insights on comprehensive approaches to protect organizations from evolving threats and vulnerabilities.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

nullcon

Changing the Colors of Your Keyboard Might Lead to Privilege Escalation

Uncover how gaming keyboard software can lead to kernel vulnerabilities, exploring real-world exploits and discussing future implications for Linux kernel security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

nullcon

Chop Suey - An Exceptional Dish With A Side Of Buffer Overflows

Explore buffer overflow vulnerabilities in exception handling, uncovering a new exploitation technique and its real-world implications for software security.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

nullcon

Securing the Road to Autonomy

Expert panel discusses challenges and strategies for securing autonomous vehicles, addressing cybersecurity risks and safety concerns in the evolving automotive industry.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

nullcon

In-Secure Remote Operations - What Sucks, Rocks, and a Super-CLI

Explore secure remote operations, analyzing pros and cons of jump server architectures, role-based shells, and PowerShell limitations. Includes new research on full token hijacking from network logon sessions without hashes or TGTs.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

nullcon

Not So Famous Attack Vectors in the World of Smart Contract Security

Explore lesser-known smart contract vulnerabilities, bad coding patterns, and defensive strategies. Learn to identify and protect against overlooked attack vectors in blockchain security.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

nullcon

Critical Infrastructure – It’s Not All About Power - Panel Discussion

Expert panel explores diverse aspects of critical infrastructure beyond power systems, discussing cybersecurity challenges and resilience strategies for essential services and networks.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

nullcon

Why I Write My Own Security Tooling and Why You Should Too

Discover the benefits of creating custom security tools for research. Learn how this approach enhances understanding, improves vulnerability detection, and ultimately makes you a more effective security researcher.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

nullcon

Dirty Stream Attack - Turning Android Share Targets To Attack Vectors

Explore Android's vulnerability to Dirty Stream Attacks, where malicious apps exploit file-sharing intents to compromise target applications. Learn detection methods and security measures.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

nullcon

The Road to Side-Channel Regression Testing in CI Development

Explore integrating side-channel regression testing into CI development, with practical demonstrations and insights on implementing countermeasures for sample attacks.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

nullcon

Server Side Prototype Pollution - Blackbox Detection Without The DoS

Innovative techniques for detecting server-side prototype pollution without causing DoS, including a Burp extension for blackbox testing and identifying JavaScript engines through crafted requests.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

nullcon

Hacking Fintech Crime Realities & Possibilities

Insights into tackling cybercrime targeting fintech platforms in India, exploring hacking techniques, law enforcement challenges, and potential countermeasures to protect the digital economy.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

nullcon

Web 3.0 Smart Contracts Could Be Leaky

Explore the challenges and solutions in writing secure smart contracts for Web 3.0, including preventing sensitive information leaks and deploying to decentralized servers.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

nullcon

Honey I Just Put The Hospital On A Ventilator

Explore DICOM file vulnerabilities in healthcare and learn about an entropy-based detection technique to identify malicious files, with demonstrations of attacks and protective solutions for Linux and Windows.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

nullcon

Hacking Android Foreground Services Escalation Of Privileges

Explore Android foreground services vulnerabilities, including a race condition bug and its patch bypass, demonstrating potential escalation of privileges and security implications.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk