Black Hat USA 2018 - Exploitation of a Modern Smartphone Baseband @HackersOnBoard

Uploaded October 2019 | Updated September 2026, 30 minutes ago

In this talk, we will explore the baseband of a modern smartphone, discussing the design and the security countermeasures that are implemented. We will then move on and explain how to find memory corruption bugs and exploit them. As a case study, we will explain in details our 2017 Mobile Pwn2Own entry, where we gained RCE (Remote Code Execution) with a 0-day on the baseband of a smartphone, which was among the target of the competition. We exploited successfully the phone remotely over the air without any user interaction and won $100,000 for this competition target.

Black Hat USA 2018 - Exploitation of a Modern Smartphone Baseband

Black Hat USA 2018 - A Deep Dive into macOS MDM and How it can be Compromised

DEF CON 27 - Douglas McKee - HVACking Understand the Delta Between Security and Reality

DEF CON 27 - Kyle Gwinnup - Next Generation Process Emulation with Binee

$Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths Black Hat USA 2018 In the blockchain, contracts may be lost but are never forgotten. Over 1,500,000 Ethereum smart contracts have been created on the blockchain but under 7,000 unique contracts have value today. An even smaller fraction of those have source code to analyze. Old contracts have been purged from the world computers working memory but they can be reconstructed and analyzed. When a contracts purpose is fulfilled, the owner typically triggers a self-destruct switch that removes code and state. These steps are similar to what an attacker would do after hijacking a contract. Is it likely the self-destruct was intentional or performed by a trusted third party? Or was it a hack or fraud? By investigating the transactions leading up to the termination of a binary-only contract, we can determine if there was an attack. After identifying an attacker, we can find patterns that lead to a possible motive by carefully examining their other transactions. This presentation will introduce Ethereum smart contracts, explain how to reverse engineer binary-only contracts, describe common classes of vulnerabilities, and then show how to investigate attacks on contracts by demonstrating new tools that re-process blockchain ledger data, recreate contracts with state, and analyze suspect transactions using traces and heuristics.$

Follow the White Rabbit Simplifying Fuzz Testing Using FuzzExMachina

DEF CON 27 - More Keys Than A Piano: Finding Secrets In Publicly Exposed Ebs Volumes

Beating the Blockchain by Mapping Out Decentralized Namecoin and Emercoin Infrastructure

DEF CON 27 - All the things you wanted to know about the DEF CON NOC and we wont tell you about