DEF CON 27 - Pedro Cabrera Camara - SDR Against Smart TVs URL and Channel Injection Attacks @HackersOnBoard

Uploaded December 2019 | Updated September 2026, 2 days ago

Software-defined-radio has revolutionized the state of the art in IoT security and especially one of the most widespread devices: Smart TV. This presentation will show in detail the HbbTV platform of Smart TV, to understand and demonstrate two attacks on these televisions using low cost SDR devices: TV channel and HbbTV server impersonation (channel and URL injection). This last attack will allow more sophisticated remote attacks: social engineering, keylogging, crypto-mining, and browser vulnerability assessment.

DEF CON 27 - Pedro Cabrera Camara - SDR Against Smart TVs URL and Channel Injection Attacks

Black Hat USA 2018 - Pestilential Protocol How Unsecure HL7 Messages Threaten Patient Lives

Edge Side Include Injection Abusing Caching Servers into SSRF and Transparent Session Hijacking

Efail Breaking S MIME and OpenPGP Email Encryption using Exfiltration Channels

Black Hat USA 2018 - Exploitation of a Modern Smartphone Baseband

Black Hat USA 2018 - A Deep Dive into macOS MDM and How it can be Compromised

DEF CON 27 - Douglas McKee - HVACking Understand the Delta Between Security and Reality

DEF CON 27 - Kyle Gwinnup - Next Generation Process Emulation with Binee

$Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths Black Hat USA 2018 In the blockchain, contracts may be lost but are never forgotten. Over 1,500,000 Ethereum smart contracts have been created on the blockchain but under 7,000 unique contracts have value today. An even smaller fraction of those have source code to analyze. Old contracts have been purged from the world computers working memory but they can be reconstructed and analyzed. When a contracts purpose is fulfilled, the owner typically triggers a self-destruct switch that removes code and state. These steps are similar to what an attacker would do after hijacking a contract. Is it likely the self-destruct was intentional or performed by a trusted third party? Or was it a hack or fraud? By investigating the transactions leading up to the termination of a binary-only contract, we can determine if there was an attack. After identifying an attacker, we can find patterns that lead to a possible motive by carefully examining their other transactions. This presentation will introduce Ethereum smart contracts, explain how to reverse engineer binary-only contracts, describe common classes of vulnerabilities, and then show how to investigate attacks on contracts by demonstrating new tools that re-process blockchain ledger data, recreate contracts with state, and analyze suspect transactions using traces and heuristics.$

Follow the White Rabbit Simplifying Fuzz Testing Using FuzzExMachina

DEF CON 27 - More Keys Than A Piano: Finding Secrets In Publicly Exposed Ebs Volumes