Black Hat Asia 2021
40 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Blackhat Asia 21Locknote: Conclusions and Key Takeaways from Day 1 locknote
Insights and Predictions: What's Next in InfoSec
In-Field Emulation & Fuzzing of PLCs to Uncover the Next Zero-Day in Industrial Control Systems
Vibe Check: IDK About This…. Why Students May Shy Away From Cyber in a Surveillance State
In-Depth Analyzing and Fuzzing for Qualcomm Hexagon Processor
The Rise of Potatoes: Privilege Escalations in Windows Services
A General Approach to Bypassing Many Kernel Protections and its Mitigation
(Un)protected Broadcasts in Android 9 and 10
A Walk Through Historical Correlations Between Vulnerabilities & Stock Prices
The Motion Sensor Western: The Good, the Bad, and the Ugly
The Price of Compatibility: Defeating macOS Kernel Using Extended File Attributes
How I Can Unlock Your Smart Door: Security Pitfalls in Cross-Vendor IoT Access Control
The Tangled Webview ----- Javascriptinterface Once More
The B-MAD Approach to Threat Modeling
Reverse Engineering Compliance
New Attack Surface in Safari: Using Just One Web Audio Vulnerability to Rule Safari
Scavenger: Misuse Error Handling Leading to Qemu/KVM Escape
Hunting Vulnerabilities of gRPC Protocol Armed Mobile/IoT Applications
Apple Neural Engine Internal: From ML Algorithm to HW Registers
X-in-the-Middle: Attacking Fast Charging Piles and Electric Vehicles
Racing the Dark: A New TOCTTOU Story From Apple's Core
How Did the Adversaries Abusing the Bitcoin Blockchain Evade Our Takeover?
Give Me a SQL Injection, I Shall PWN IIS and SQL Server
Hey, You, Get off My Private Data: Do Apps Respect Your Privacy as They Claim?
Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet
A Mirage of Safety: Bug Finding & Exploit Techniques of Top Android Vendor's Privacy Protection Apps
Domain Borrowing: Catch My C2 Traffic if You Can
Pre-built JOP Chains with the JOP ROCKET: Bypassing DEP without ROP
"We Are About to Land": How CloudDragon Turns a Nightmare Into Reality
The Cost of Complexity: Different Vulnerabilities While Implementing the Same RFC
Threat Hunting in Active Directory Environment
Mining and Exploiting (Mobile) Payment Credential Leaks in the Wild
Mem2Img: Memory-Resident Malware Detection via Convolution Neural Network
Hiding Objects from Computer Vision by Exploiting Correlation Biases
Disappeared Coins: Steal Hashrate in Stratum Secretly
A New Era of One-Click Attacks: How to Break Install-Less Apps
Wideshears: Investigating and Breaking Widevine on QTEE
Enter Sandbox
Anti-Forensics: Reverse Engineering a Leading Phone Forensic Tool
Keynote: Lessons From 11 Billion Breached Records