2012 | Cyberhades

Los productos de Apple desde 1976-2012

Haz click en la imagen para verla más grande

Vídeos del Qt Developers Day Berlín 2012

Qt Developer Days Berlín 2012 es la novena conferencia celebrada en Europa. Esta conferencia se enfoca en todo lo que envuelve a Qt. Para los despistados, Qt son las librerías sobre las que está construido KDE o MeeGo entre otros.

Esta es la lista de vídeos disponible:

Material del Lua workshop 2012

Aquí tenemos algunos vídeos y diapositivas de la mayoría de las presentaciones dadas en el Lua Workshop 2012:

Textadept - Behind the Scenes Slides Video
Crazy Ivan - Lua Driven Robots Video
Gemini - An Open Source Library for Game Development on iOS Using Lua Slides Video
picoDB: a no-SQL database tool for eLua Slides Video
Luerl, a Lua VM written in Erlang Video
LuaFlow - An Open Source Lua OpenFlow Controller Video
Lua multi VM system for home automation Slides Video
Building a Lua Based Platform (Luvit) Slides Video
Small Team, Huge Game, and Lua Video
What is Next for Lua? A Personal Perspective Slides Video
Incrementally developing and implementing Hirschberg's longest common subseqence algorithm using Lua Slides Video
Adding an Lua-based integrated character-based menu system into the SciTE editor Slides Video
Integrating Lua for fun and profit: Vim's if_lua and PostgreSQL's PL/Lua Video
Make Your Own M2M Application, in a 1/2 Hour, with Lua Video
Using Lua for Integration with a specialized IDE Slides Slides Video
Lua Q&A Session with Roberto Ierusalimschy Video

Vídeos de la RootedCON

Ya están disponibles los vídeos del archiconocido congreso de seguridad RootedCON. Éste celebró en Madrid entre 1 y 3 de marzo. Ya han pasado unos meses, pero más vale tarde que nunca y para los que no tuvimos el privilegio de asistir ahora podemos disfrutar de dichas charlas:

Diapositivas de las Hacker Halted USA 2012

Ya están disponible para descarga las presentaciones de la Hacker Halted USA 2012 celebrada en Miami el pasado mes de octubre.

Presentaciones de la ZeroNights 2012

ZeroNights es otra conferencia de seguridad, ésta se celebró en Moscú el 19 y 20 de noviembre y han publicado todas las presentaciones que se dieron. Y para no perder la costumbre, aquí tenéis la lista de las mismas :)

Vídeos de CascadiaJS

CascadiaJS es una conferencia orientada a Javascript que se celebró en Seattle los pasados 8 y 9 de noviembre. Javascript es un lenguaje que cada vez está tomando más relevancia y no sólo en el mundo web sino también en los nuevos sistemas operativos de Microsoft, así que ya no es sólo un lenguaje para desarrolladores web.

Pues nada, aquí tenéis los vídeos de las charlas de CascadiaJS:

Presentaciones de la POC 2012

La POC 2012 (Power Of Community) es una conferencia que se lleva celebrando desde el año 2006 por hackers coreanos y profesionales de la seguridad. Esta edición fue celebrada los pasados 8 y 9 noviembre y ya han publicado las presentaciones que se dieron (no todas):

Presentaciones de la BruCON 2012

Ya se encuentran disponibles las presentaciones de la BruCON 2012 celebrada el pasado mes de septiembre durante los días 26 y 27.

(Keynote) Ed Skoudis - Letting Loose the Dogs of (cyber) War - PPTX
Georgia Weidman - Introducing the Smartphone Penetration Testing Framework - PDF
Robert McArdle - HTML5 - A Whole New Attack Vector - ZIP
Raul Siles - Security of National eID (smartcard-based) Web Applications - PDF
Josh Corman and Jericho - "Cyberwar" : Not What We Were Expecting - PPTX
Mathy Vanhoef - New flaws in WPA-TKIP - PDF
Martin Gallo - Uncovering SAP vulnerabilities: dissecting and breaking the Diag protocol - PDF
Fernando Gont - Recent Advances in IPv6 Security - PPTX
Gregory Pickett - pMap, the silent killer - PDF
Carlos Garcia - How I met your pointer (Hijacking client software for fuzz and profit) - PDF
Mickey Shkatov - we have you by the gadgets - PPTX
David Mortman - The Defense RESTs: Automation and APIs for Improving Security - PPTX
Kyle 'Kos' Osborn & Krzysztof Kotowicz - Advanced Chrome Extension Exploitation (2h) - PDF
Abraham Aranguren - Introducing OWTF (4hr) - tar.gz - blog post

Presentaciones de la Ruxcon 2012

La conferencia sobre seguridad Ruxcon se celbebró en Australia los pasados 20 y 21 de octubre. Ya están disponibles (la mayoría) las presentaciones oficiales. Aquí tenéis la lista:

Microsoft Windows Server 2012 (Infografía)

Fuente

Vídeos de la DerbyCon 2012

Este era otra de las entradas que tenía pendiente de publicar. Como ya bien anunciaron en Security By Default, en IronGeek estaban subiendo los vídeos de la DerbyCon 2012. Hasta ahora sólo faltan 2 vídeos, el de Kevin Mitnick, pendiente de aprobar y otro titulado “You Can’t Buy Security. Building an Open Sourced Information Security Program”, del cual parece ser tuvieron alguna dificultad técnica. Para que quede registrado por aquí, esta es la lista:

Presentaciones de la HITB 2012 de Malasia

Ya están disponibles las presentaciones de la Hack In The Box celebrada en Malasia los pasados 10 y 11 de octubre. La lista de las mismas:

Fuente

Diferencia entre el internet actual y el de hace 10 años (Infografía)

Fuente

Conferencia de desarrolladores noruegos 2012 - Vídeos

NDC (Norwagian Developers Conference) 2012 se celebró el pasado mes de junio. Desde la página de la agenda puedes acceder a todas las charlas que se dieron. Las hay para todos los gustos:

Keynote: A Happy Grain of Sand Getting Agile with Scrum WebGL What? Inside Mono for Android Cut The Rope: from iOS to HTML5 to Windows 8 Decisions, decisions Ideas for efficient BDD with SpecFlow through examples Just cause it’s JavaScript, doesn’t give you a license to write rubbish Making an awesome Open-Source Project Tutorial: Enterprise development with NServiceBus Leading a Self-Organizing Team HTML5 Game Development Patterns of Mobile Application Development Windows 8 Apps with HTML5 and JavaScript: from zero to hero! MicroService Architecture Five Things You Didn’t Know About PostGresSQL Professional Software Development NuGet: Zero to DONE in no time. Tutorial: Enterprise development with NServiceBus Agile Estimating Real World NodeJS - Creating the Tekpub API Mobile, How Do I Develop Thee? Let Me Count the Ways Introduction to XAML in Windows 8/Metro Object Orientation Revisited. Simplicity and power with DCI. Roslyn… hmmmm… what? Building External DSLs for Fun and Profit Hacking .Net Applications: The Black Arts Tutorial: Enterprise development with NServiceBus Advanced Topics in Agile Planning The rise of server-side JavaScript One Service, Any Device, Any Experience: ASP.NET Web API, JSON, and Windows 8, Windows Phone, iOS, and Android Metro Design Principles Modeling Distributed Systems with NServiceBus Studio WCF Extensibility: Tapping into the calls Advances in Code Contracts for .NET Authentication & Authorization in .NET 4.5 - Claims & Tokens become the standard Model VIM for aspiring #ithipsters Scaling Agile to Work with a Distributed Team Learning to love HTML and CSS (for grumpy developers) Windows Phone 7.5 Background workers Bringing Wordfeud to WP7 and Windows 8 Crafting Wicked Domain Models Fakes, Isolating Unit Tests How we do language design at Microsoft: VB and C# Mind Control Your Computer In C#: Natural User Interfaces Through The Power Of Thought NServiceBus Hackathon User Stories for Agile Requirements The Outliers of HTML5 Not a Mobile Developer? Not a Developer! In and out in WinRT The Single Responsibility Principle. Nemerle Programming Language Continuous testing Social Clairvoyance - Data mining the social web When The Wheels Come Off Agile ASP.NET 4.5: What’s in the box? JavaScript All Over - Sticking Your Big Toe in Node.js Developing hybrid solutions with Windows Azure Service Bus, WF and BizTalk Server 2010 Clean Architecture Rediscovering JavaScript The Software Team Leader Manifesto The Process, Technology and Practice of Continuous Delivery Introduction to ASP.NET MVC with ASP.NET MVC 4 Embracing Uncertainty Microsoft’s Modern Web Stack, Starring ASP.NET Web API Learn how to build a modern browser applications using Backbone.js and Service Stack A WIF Of Security In SharePoint And Azure Design Patterns for .NET Programmers BDD: Busting the myths I Can’t Believe It’s Not Roslyn–Using Nemerle Macros to extend the C# Language Continuous Delivery story with FIFA Introduction to ASP.NET MVC with ASP.NET MVC 4 Scaling Agile Teams Securing ASP.NET Web APIs Interactive user experience: natural user interfaces Extending XAML To Overcome Pretty Much Any Limitation Commands, Queries, and Consistency Git and GitHub for Developers on Windows Reinventing software quality A Thousand deliveries a Day at AppHarbor CyberDojo - genuine coding practice Moving from Scrum to Kanban HTML5 WebSockets and Socket.IO Creating User Experiences: Unlocking the Invisible Cage Windows Azure Access Control - Outsourcing Security to the cloud What is OO? Where did it come from? Where is it going? Full-text search with Lucene and neat things you can do with it Dynamic .NET Demystified Six aspects of successful software delivery CyberDojo - genuine coding practice The surprising science behind agile leadership CSS in the 4th dimension: Not your daddy’s CSS animations Designing for Touch on Any Platform Cloud Computing: More Than Just Hosting RavenDB data modeling walkthrough Introduction to Rx Branch-per-Feature in the realm of Agile and .NET development Patterns of Effective Delivery You’re in production. Now what? Mind-blowing Apps with HTML5 Canvas ASP.NET MVC and jQuery Mobile How to think cost when programming Cloud Computing apps? Dealing with Dynamically-Typed Legacy Code Git More Done A Better Way To Learn Refactoring Ten Web Performance Tuning Tricks in 60 Minutes Script your phone on your phone with touchdevelop. How to get productive in a project in 24h Dataflow networks in .NET 4.5 .NET Rocks! Panel - The State of Agile And The Road Ahead The Cloud Security Rules Deep Design Lessons Debugging the Web with Fiddler Revealing the SQL Server Magic SignalR: Awesome in Real-Time with ASP.NET Developers: The Prima Donnas of the 21st Century Hybrid Applications with MongoDB and RDBMS MVVM Applied: From Silverlight to Windows Phone to Windows 8 What’s New in Windows Azure: 10,000 Meter Edition An architecture remake Gamifying testing by accident with pex4fun. Thinking in Functional Style using F# and (some) C# What?!? C# Could Do That?!? GOAL - Game Oriented Agile Learning Agile, Lean, and the Space Between HTML5 and CSS3: does now really mean now? Xamarin - State of the Union Hell has frozen over: writing Node.js apps for Windows Azure Beyond the compiler - going up to 11 with conventions in a statically typed language RabbitMQ Hands On F# in action: playing functional Conway’s game of life Gesture Recognition with Kinect for Windows GOAL - Game Oriented Agile Learning What Does Self-Organizing Team Really Mean? How to Destroy the Web MonoTouch - C# + iOS = Good Times Making your Application Cloud-ready Neo4j in a .NET world Evolution of the Entity Framework NDC 2012 Cage Match: NodeJS vs. ASP.NET How GitHub Works GOAL - Game Oriented Agile Learning Programmer Anarchy Accessibility doesn’t exist! Creating UX with Story Boarding Make Windows Phone games! .NET On a Diet Introduction to OWIN and Gate Clojure for the Web Async Part 1 – new feature in Visual Studio 11 for responsive programming. 10 things you can do to better lead your agile team Responsive Web Design SharePoint, Office 365, JavaScript And Azure Big time: introducing Hadoop on Azure The era of tiny REST with ASP.NET MVC Pure JavaScript Async Part 2 – deep dive into the new language feature of VB/C# You had me at Halo Metaprogramming with Nemerle From Zero to Hero - Get Social With Facebook Using Amazon S3 & CloudFront for Scalable and Secure Distribution Caring about Code Quality No more magical webservices feat. ServiceStack .NET in the physical and meta-physical world Continuous integration - char by char

Presentaciones de la BlackHat USA 2012

Ya están disponibles para descarga el material de las charlas que se dieron en la BlackHat USA 2012 pasado mes de julio en Las Vegas:

A Scientific (But Non Academic) Study of How Malware Employs Anti-Debugging, Anti-Disassembly and Anti-Virtualization Technologies
- BH_US_12_Branco_Scientific_Academic_WP.pdf
- BH_US_12_Branco_Scientific_Academic_Slides.pdf
A Stitch in Time Saves Nine: A Case of Multiple Operating System Vulnerability
- BH_US_12_Wojtczuk_A_Stitch_In_Time_WP.pdf
- BH_US_12_Wojtczuk_A_Stitch_In_Time_Slides.pdf
Adventures in Bouncerland
- BH_US_12_Percoco_Adventures_in_Bouncerland_WP.pdf
- BH_US_12_Percoco_Bouncerland_Slides.pdf
AMF Testing Made Easy!
- BH_US_12_Carettoni_AMF_Testing_WP.pdf
- BH_US_12_Carettoni_AMF_Testing_Slides.pdf
Source.zip
Are You My Type? - Breaking .NET Sandboxes Through Serialization
- BH_US_12_Forshaw_Are_You_My_Type_WP.pdf
- BH_US_12_Forshaw_Are_You_My_Type_Slides.pdf
Blended Threats and JavaScript: A Plan for Permanent Network Compromise
- BH_US_12_Purviance_Blended_Threats_WP.pdf
- BH_US_12_Purviance_Blended_Threats_Slides.pdf
Clonewise - Automated Package Clone Detection
- BH_US_12_Cesare_Clonewise_WP.pdf
- BH_US_12_Cesare_Clonewise_Slides.pdf
Confessions of a WAF Developer: Protocol-Level Evasion of Web Application Firewalls
- BH_US_12_Ristic_Protocol_Level_WP.pdf
- BH_US_12_Ristic_Protocol_Level_Slides.pdf
Control-Alt-Hack(TM): White Hat Hacking for Fun and Profit (A Computer Security Card Game)
- BH_US_12_Kohno_Control_Alt_Hack_WP.pdf
- BH_US_12_Kohno_Control_Alt_Hack_Slides.pdf
DE MYSTERIIS DOM JOBSIVS: Mac EFI Rootkits
- BH_US_12_LoukasK_De_Mysteriis_Dom_Jobsivs_WP.pdf
- BH_US_12_LoukasK_De_Mysteriis_Dom_Jobsivs_Slides.pdf
Digging Deep Into The Flash Sandboxes
- BH_US_12_Sabanal_Digging_Deep_WP.pdf
- BH_US_12_Sabanal_Digging_Deep_Slides.pdf
Don't Stand So Close To Me: An Analysis of the NFC Attack Surface
Easy Local Windows Kernel Exploitation
- BH_US_12_Cerrudo_Windows_Kernel_WP.pdf
- BH_US_12_Cerrudo_Windows_Kernal_Slides.pdf
Errata Hits Puberty: 13 Years of Chagrin
- BH_US_12_Jericho_Errata_Slides.pdf
Exchanging Demands
Exploit Mitigation Improvements in Win 8
- BH_US_12_Miller_Exploit_Mitigation_Slides.pdf
Exploiting the jemalloc Memory Allocator: Owning Firefox's Heap
File disinfection framework: Striking back at polymorphic viruses
- BH_US_12_Vuksan_Pericin_Disinfection_Framework_WP.pdf
Flowers for Automated Malware Analysis
- BH_US_12_Song_Royal_Flowers_Automated_WP.pdf
- BH_US_12_Song_Royal_Flowers_Automated_Slides.pdf
From the Iriscode to the Iris: A New Vulnerability of Iris Recognition Systems
- BH_US_12_Galbally_Iris_Reconstruction_WP.pdf
- BH_US_12_Galbally_Iris_Reconstruction_Slides.pdf
Ghost is in the Air(traffic)
- BH_US_12_Costin_Ghosts_In_Air_WP.pdf
- BH_US_12_Costin_Ghosts_In_Air_Slides.pdf
Google Native Client - Analysis Of A Secure Browser Plugin Sandbox
- BH_US_12_Rohlf_Google_Native_Client_WP.pdf
- BH_US_12_Rohlf_Google_Native_Client_Slides.pdf
Hacking the Corporate Mind: Using Social Engineering Tactics to Improve Organizational Security Acceptance
- BH_US_12_Philput_Hacking_The_Corporate_Mind_WP.pdf
- BH_US_12_Philput_Hacking_The_Corporate_Mind_Slides.pdf
Hacking with WebSockets
- BH_US_12_Shekyan_Toukharian_Hacking_Websocket_Slides.pdf
Hardware backdooring is practical
- BH_US_12_Brossard_Backdoor_Hacking_WP.pdf
- BH_US_12_Brossard_Backdoor_Hacking_Slides.cpgz
Here Be Backdoors: A Journey Into The Secrets Of Industrial Firmware
- BH_US_12_Santamarta_Backdoors_WP.pdf
Hookin' ain't easy: BeEF injection with MITM
- BH_US_12_Ocepek_Linn_BeEF_MITM_WP.pdf
- BH_US_12_Ocepek_Linn_BeEF_MITM_Slides.pdf
How many bricks does it take to crack a microcell?
- BH_US_12_Rowley_Microcell_Bricks_WP.pdf
- BH_US_12_Rowley_Microcell_Bricks_Slides.pdf
How the Analysis of Electrical Current Consumption of Embedded Systems Could Lead to Code Reversing?
HTML5 Top 10 Threats – Stealth Attacks and Silent Exploits
- BH_US_12_Shah_Silent_Exploits_WP.pdf
- BH_US_12_Shah_Silent_Exploits_Slides.pdf
iOS Application Security Assessment and Automation: Introducing SIRA
- BH_US_12_Engler_SIRA_WP.pdf
- BH_US_12_Engler_SIRA_Slides.pdf
iOS Kernel Heap Armageddon Revisited
- BH_US_12_Esser_iOS_Kernel_Heap_Armageddon_WP.pdf
- BH_US_12_Esser_iOS_Kernel_Heap_Armageddon_Slides.pdf
Legal Aspects of Cyberspace Operations
- BH_US_12_Clark_Legal_Aspects_Slides.pdf
Looking Into The Eye Of The Meter
- BH_US_12_Weber_Eye_of_the_Meter_WP.pdf
- BH_US_12_Weber_Eye_of_the_Meter_Slides.pdf
My Arduino Can Beat Up Your Hotel Room Lock
- BH_US_12_Brocious_Hotel_Key_WP.pdf
- BH_US_12_Brocious_Hotel_Key_Slides.pdf
Owning bad guys {and mafia} with javascript botnets
- BH_US_12_Alonso_Owning_Bad_Guys_WP.pdf
- BH_US_12_Alonso_Owning_Bad_Guys_Slides.pdf
Probing Mobile Operator Networks
- BH_US_12_Milliner_Probing Mobile Operating_WP.pdf
- BH_US_12_Milliner_Probing Mobile Operating_Slides.pdf
SexyDefense - Maximizing the Home-Field Advantage
- BH_US_12_Amit_Sexy_Defense_WP.pdf
- BH_US_12_Amit_Sexy_Defense_Slides.pdf
SQL Injection to MIPS Overflows: Rooting SOHO Routers
SSRF vs. Business Critical Applications
- BH_US_12_Polyakov_SSRF_Business_WP.pdf
- BH_US_12_Polyakov_SSRF_Business_Slides.pdf
State of Web Exploit Toolkits
- BH_US_12_Jones_State_Web_Exploits_WP.pdf
- BH_US_12_Jones_State_Web_Exploits_Slides.pdf
Still Passing the Hash 15 Years Later? Using the Keys to the Kingdom to Access All your Data
Targeted Intrusion Remediation: Lessons From The Front Lines
- BH_US_12_Aldridge_Targeted_Intrustion_WP.pdf
- BH_US_12_Aldridge_Targeted_Intrustion_Slides.pdf
The Defense RESTs: Automation and APIs for Improving Security
- BH_US_12_Mortman_Defense_RESTs_WP.pdf
- BH_US_12_Mortman_Defense_RESTs_Slides.pdf
The Info Leak Era on Software Exploitation
- BH_US_12_Serna_Leak_Era_WP.pdf
- BH_US_12_Serna_Leak_Era_Slides.pdf
The Myth of Twelve More Bytes: Security on the Post-Scarcity Internet
- BH_US_12_Ritter_Stamos_Myth_of_Twelve_More_Bytes_Slides.pdf
The subway line 8 - Exploitation of Windows 8 Metro Style Apps
- BH_US_12_Tsai_Pan_Exploiting_Windows8_WP.pdf
- BH_US_12_Tsai_Pan_Exploiting_Windows8_Slides.pdf
Torturing OpenSSL
- BH_US_12_Bertacco_TorturingOpenSSL_WP.pdf
- BH_US_12_Bertacco_TorturingOpenSSL_Slides.pdf
Trust, Security, and Society
- BH_US_12_Schneier_Liars_and_Outliers_WP.pdf
We have you by the Gadgets
- BH_US_12_Shkatov_Kohlenberg_Blackhat_Have_You_By_The_Gadgets_WP.pdf
- BH_US_12_Shkatov_Kohlenberg_Blackhat_Have_You_By_The_Gadgets_Slides.pdf
Web Tracking for You
Windows Phone 7 Internals and Exploitability
- BH_US_12_Oi_Windows_Phone_WP.pdf
- BH_US_12_Oi_Windows_Phone_Slides.pdf
Windows 8 Heap Internals
- BH_US_12_Atlas_GHZ_Workshop_Slides.pdf
- BH_US_12_Atlas_GHZ_Workshop_Code.zip
Advanced Chrome Extension Exploitation - Leveraging API Powers for the Better Evil
Code Reviewing Web Application Framework Based Applications (Struts 2, Spring MVC, Ruby on Rails (Groovy on Grails), .NET MVC)
- BH_US_12_Kang_Code_Reviewing_WP.pdf
Lessons Of Binary Analysis
- BH_US_12_Rioux_Lessons_Of_Binary_Analysis_Slides.pdf
Linux interactive exploit development with GDB and PEDA
- BH_US_12_Le_Linux_Interactive_Exploit_Development_with_GDB_and_PEDA_Slides.pdf
Ruby for Pentesters: The Workshop
- BH_US_12_Scott_ruby_for_pentesters_the_workshop_Slides.pdf
HTExploit Bypassing Htaccess Restrictions
libinjection: A C library for SQLi detection and generation through lexical analysis of real world attacks
- BH_US_12_Galbreath_Libinjection_Slides.pdf
ModSecurity as Universal Cross-platform Web Protection Tool
- BH_US_12_Wroblewski_ModSecurity_Universal_WP.pdf
- BH_US_12_Wroblewski_ModSecurity_Universal_Slides.pdf
Passive Bluetooth Monitoring in Scapy
Stamp Out Hash Corruption, Crack All The Things
SYNful Deceit, Stateful Subterfuge
- BH_US_12_Patten_Steele_SYNful_Deceit_Slides.pdf
The last gasp of the industrial air-gap...
- BH_US_12_Leverett_Last_Gasp_Slides.pdf
When security gets in the way: PenTesting mobile apps that use certificate pinning
- BH_US_12_Diqut_Osborne_Mobile_Certificate_Pinning_Slides.pdf

Fuente

Presentaciones de la Recon 2012

Ya están disponibles para descarga las presentaciones de la Recon 2012 celebrada el pasado mes de junio.

Backside optical analysis hardware/software running on ICs - Slides (application/pdf - 3.2 MB)
Be Social. Use Rewoltke. - Slides (application/pdf - 4.9 MB)
Bootkit Threats: In-Depth Reverse Engineering & Defense - Slides (application/pdf - 3.9 MB)
Compiler Internals: Exceptions and RTTI - Scripts (application/zip - 44.5 KB)Slides (application/pdf - 872.3 KB)
Cryptographic Function Identification in Obfuscated Binary Programs - Slides (application/pdf - 3.7 MB)
Designing a minimal operating system to emulate 32/64bits x86 code snippets, shellcode or malware in Bochs - Slides (application/pdf - 957.8 KB)
Dynamic Binary Instrumentation Frameworks: I know you're there spying on me - Slides (application/pdf - 1.8 MB)
Extraordinary String Based Attacks - Slides (application/pdf - 3 MB)
Facedancer USB: Exploiting the Magic School Bus - Slides (application/pdf - 16.2 MB)
GPUs for Mobile Malware, Mitigation and More - Slides (application/pdf - 831.7 KB)
Thinking outside-the-CPU - Slides (application/pdf - 831.7 KB)
Injecting custom payload into signed Windows executables - Slides (application/octet-stream - 3.7 MB)
Analysis of the CVE-2012-0151 vulnerability - Slides (application/octet-stream - 3.7 MB)
Inside AVM - Slides (application/pdf - 1.2 MB)
Modern static security checking of C / C++ programs - Slides (application/pdf - 1.3 MB)
Predicting English keywords from Java Bytecodes using Machine Learning - Slides (application/pdf - 401.5 KB)
Recognition of binary patterns by Morphological analysis - Slides (application/pdf - 4.6 MB)
Reverse engineering of binary programs for custom virtual machines - Slides (application/pdf - 554.6 KB)
The Case for Semantics-Based Methods in Reverse Engineering - Slides (application/pdf - 763.8 KB)
reversing dwarf fortress for !!fun!! and ruby - Slides (application/pdf - 448.2 KB)

Fuente

Vídeos de la DjangoCon Europe 2012

Ya se encuentran disponibles las charlas de la DjangoCon Europe 2012 celebrada en Zurich.

Presentaciones de la Hack in the box 2012 celebrada en Amsterdam

Ya podemos descargarnos las presentaciones de otra gran conferencia de seguridad en la que ha habido participación hispana. La HITB (Hack in the box) 2012 Amsterdam:

Fuente

¡Mañana vuelve Cálico Electrónico!

Vuelve el héroe español, no te pierdas mañana 7 de mayo el estreno mundial del primer capítulo de la 4a temporada.

Gracias Niko (y a Informatica64) por traernos al héroe que tantos buenos ratos nos ha hecho pasar.

En CyberHades no nos perderemos ninguno de sus nuevos capítulos.

Material de la conferencia ACK Security 2012 disponible para descargar

Desde este enlace (torrent) o este otro (descarga directa) puedes bajar todo el material más extras del evento ACK Security Conference que se celebró en Colombia del 26 al 30 marzo en la ciudad de Manizales. Aquí puedes ver la relación de ponentes.

No os perdáis el material disponible.

Web del evento

DragonJar

Presentaciones Hackito Ergo Sum 2012

Ya están disponibles algunas de las presentaciones de la tercera edición de Hackito Ergo Sum, evento celebrado los 12, 13 y 14 de abril de 2012.

[Keynote #1] by Cedric Blancher /PDF Slides
[Keynote #2] by Fyodor Yarochkin /PDF Slides
[Keynote #3] by Marc “van Hauser” Heuse /PDF Slides
[Lockpickito Ergo Sum] by Walter Bergers /PDF Slides
["Secure Password Managers" and "Military-Grade Encryption" on Smartphones: Oh Really?] by Andrey Belenko & Dmitry Sklyarov /PDF Slides
[Hardware backdooring is practical] by Jonathan Brossard & Florentin Demetrescu /PDF Slides
[Cryptographic Function Identification in Obfuscated Binary Programs] by Joan Calvet /PDF Slides
[Recent Advances in IPv6 Security] by Fernando Gont /PDF Slides
[Hacking the NFC credit cards for fun and debit ; )] by Renaud Lifchitz /PDF Slides
["The System of Automatic Searching for Vulnerabilities or how to use Taint Analysis to find security bugs"] by Nikita Tarakanov & Alex Bazhanyuk /PDF Slides
[Exploiting a Coalmine: Abusing Complex Bugs in Webkit's RenderArena] by Georg Wicherski/PDF Slides

Fuente

Material oficial de la Blackhat Europe 2012 disponible

Ya está disponible el material de la recién acabada BlackHat 2012 Europa. Parece que faltan algunas charlas. Si las ponen actualizaremos esta entrada.

Axelle Apvrille - Guillaume LovetAn Attacker's Day into Virology: Human vs Computer

Antonios Atlasis - Attacking IPv6 Implementation Using Fragmentation

Michael BakerFinding Needles in Haystacks (The Size of Countries)

Andrey Belenko - Dmitry Sklyarov"Secure Password Managers" and "Military-Grade Encryption" on Smartphones: Oh Really?

Andy DavisHDMI - Hacking Displays Made Interesting

Stephen de Vries - Beyond Scanning: Automating Web Application Security Tests

Tyrone Erasmus - The Heavy Metal That Poisoned the Droid

Takahiro Haruyama - Hiroshi SuzukiOne-byte Modification for Breaking Memory Forensic Analysis

Slides

Marcia Hofmann - Seth SchoenDefending Privacy at the U.S. Border: A Guide for Travelers Carrying Digital Devices

Jeff Jarmoc - SSL/TLS Interception Proxies and Transitive Trust

Ling Chuan Lee - Chan Lee YeeGDI Font Fuzzing in Windows Kernel For Fun

Steve Lord - Drop It Like It's Hotspot: Hacking Mifi Routers For Nefarious Purposes

Slides

Rafal Los - Shane MacDougallOffensive Threat Modeling for Attackers: Turning Threat Modeling on its Head

Matias Madou - Secure in 2010? Broken in 2011!

Mariano Nunez Di Croce - Cyber-Attacks & SAP systems: Is Our Business-Critical Infrastructure Exposed?

Phil Polstra - Preventing "Oh Shit!" Moments for 20 Euros or Less

Jerome Radcliffe - Issues with Embedded Device Disclosures: Helping the Vendors and Recognizing the End-Users

Enno Rey - Daniel MendeAll Your Calls Are Still Belong to Us: How We Compromised the Cisco VoIP Crypto Ecosystem

Simon Roses Femerling - Smartphone's Apps Are Not That Smart: Insecure Development Practices

Paul Royal - Entrapment: Tricking Malware with Transparent, Scalable Malware Analysis

Rahul Sasi - IVR Security- Internal Network Attack via Phone Lines

Justin Searle - Dissecting Smart Meters

White Paper

Slides
Shreeraj Shah - HTML5 Top 10 Threats: Stealth Attacks and Silent Exploits

Sumit Siddharth - Tom ForbesHacking XPATH 2.0

Alexey Sintsov - Lotus Domino: Penetration Through the Controller

Didier Stevens - Malicious PDF Analysis

Ben Williams - They Ought to Know Better: Exploiting Security Gateways via Their Web Interfaces

Chris Wysopal - Data Mining a Mountain of Zero Day Vulnerabilities

Justin Searle - Workshop: SamuraiWTF

Archivo

Fuente

PyCon US 2012 - Vídeos

Ya están disponibles los vídeos de la PyCon US 2012:

2012, el año de Alan Turing

Este año se celebra el centenario del nacimiento del genio Alan Turing.

Puedes ver todos los eventos que están programados alrededor del mundo aquí.

Ya sabéis nuestra pasión por este héroe y genio moderno, estaremos atentos y lo celebraremos por todo lo alto, él se lo merece.