This presentation will cover techniques that can be used to control and extract data from network printers. Most of it will be specific to HP Jetdirects, but some of the techniques are still applicable to other network printer vendors.
Topics covered will include information on the basics of network printer protocols and languages, finding and controlling network printers, simple pranks, using JetDirect boxes as files/web servers, extracting faxes/stored print jobs, sniffing and replaying print jobs as well as a bit on coding your own scripts with Perl and PJL to control network printers.
I know what I'm looking for
We analyzed the hardware of the Mifare tags and found weaknesses in several parts of the cipher.
In several European countries proposals for vast expansion of the powers of law enforcement in the digital realm are floating about. The panel focuses on the pros and cons of such powers.
Vladimir Katalov Vladimir Katalov presents the results of analysing the Apple iCloud protocol and its impact on iCloud services.
This talk will summarize what we have learned about the internal architecture of the iPhone platform, its security, and the ways we have found to defeat these security measures.
Privacy International, Agentura.Ru and Citizen Lab have joined forces to launch a new project ‘Russia’s Surveillance State’. The project aims to undertake research and investigation into surveillance practices in Russia.
The vlog about the fourth day of the 2011 International ICS Cybersecurity Advanced Training. This day is what it’s all about, the Blue Team / Red Team exercise.
This presentation describes the technologies behind advanced static and dynamic vulnerability analysis tools. We conclude with a discussion of new ways to ensure that bugs get fixed before it’s too late.
This talk presents an overview of the security risks in non-executable files such as PDF, rich media and office documents. The talk aims to range from global considerations to individual cases.
After a short introduction on the differences of IPv4 to IPv6, the weaknesses in IPv6 will be shown. Highlight of the talk is the presentation of the THC-IPV6 Attack Toolkit.
This talk is about the project to build the next generation IDS engine. The engine has been released under the name Suricata and can be downloaded from the Open Information Security Foundation (OISF) web site.
An update about the Honey project and the development of the CIC News engine.
We will cover on how the DEF CON network team builds a network from scratch, in three days with very little budget.
We describe the design of the Xbox 360 security system from a very high-legel point of view. In the second part we will discuss the details of the Xbox 360 system and security architecture.
This talk evenly distributes technical knowledge and humor to present the funniest discoveries related to malware authors and the fight against their code.
This talk will conclude with a proof-of-concept web application demo that demonstrates the techniques and issues mentioned as well as thoughts for solving the next generation of spam.
This presentation will cover techniques that can be used to control and extract data from network printers.
Sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications.
Charlie Miller will take an in depth look at a common embedded controller used in a battery and reverse engineer the firmware.
This course is an introduction to the fundamental technologies behind Trusted Computing. You will learn what Trusted Platform Modules (TPMs) are and what capabilities they can provide both at an in-depth technical level and in an enterprise context.
The talk discusses a GSM debugging tool that consists entirely of open source software and open radio hardware. We will demonstrate how to record and decode GSM calls, even encrypted ones.
A panel discussion with Michael Coates (Mozilla), Chris Evans (Google), Jeremiah Grossman (WhiteHat Security), Adam Mein (Google), Alex Rice (Facebook)
This is a talk about the struggles of becoming a Private Investigator and what the laws are for computer forensics going forward.
Although many companies claim to care about end-user privacy, none seem to be willing to compete on the extent to which they assist or resist the government in its surveillance activities. This talk will pierce the veil of secrecy surrounding these practices.