Nullcon Berlin 2024
| title | author | length |
|---|---|---|
| Breaking RSA Authentication & Bitstream Recovery From Zynq-7000 SoC | Arpan Jati | 42m |
An implementation bug in the Zynq‑7000 FSBL causes the partition header to be read twice but authenticated only on the second read, letting an attacker feed a… | ||
| How Things Are Going For APT41 In 2024 | Georgy Kucherin | 32m |
APT41 compromises a South Korean game developer in Jan 2024 by escalating from a low-privilege account to modify a writable shared network drive deployment… | ||
| Revela: Unlock The Secrets Of Move Smart Contracts | NGUYEN Anh Quynh, Van Hoa | 44m |
Revela is an open-source Revela decompiler that claims to recover ~100% of deployed Move modules on Aptos by turning Move bytecode into readable, compilable… | ||
| Fault Injection And The Supply Chain | Nolen Johnson, Jan Altensen | 37m |
Researchers demonstrate that storage-based eMMC shorting against Amlogic Chromecasts reliably interrupts U-Boot, exposes a shell and triggers an upgrade_step=3… | ||
| Open Sesame - Or How Secure Is Your Stuff In Electronic Lockers | Dennis Giese | 36m |
Digilock-style electronic lockers reveal that firmware and keys are extractable from the PCB because several flash blocks remain unprotected, allowing a… | ||
| The World Of Spyware For Rent | Fred Raynal | 51m |
Maps the spyware-for-rent market by naming concrete products, prices and tactics: private firms sell full mobile compromise (Pegasus-style) often using… | ||
| Fuzzing At Mach Speed: Uncovering IPC Vulnerabilities On MacOS | Dillon | 53m |
A year of work produces a fast, practical macOS IPC fuzzer that directly calls Mig RPC handlers (avoiding kernel roundtrips) and uses a custom Mach message… | ||
| Hacking Trains | Jaden Furtado | 38m |
OSINT scanning finds an Android app on Google Play with hardcoded admin:ignorecase credentials and undocumented functionality that allows remote EVC code… | ||
| Looking In The Rear View Mirror After 25 Years In The Industry | Nicolas Gregoire | 47m |
Speakers Bio
Nicolas Grégoire has almost 25 years of experience in infosec, in multiple technical roles like penetration tester, auditor, bug hunter and… | ||
| The Complexity Of Reversing Flutter Applications | Axelle Apvrille | 39m |
Parses Dart AOT snapshots, runs the binary, disassembles with Radare2, locates the object pool accessed via a custom register and computes indexes (offset/8)… | ||
| Hi, My Name Is Keyboard | Marc Newlin | 37m |
Reports unauthenticated Bluetooth keystroke-injection flaws across macOS, iOS, Android, Linux and a user-interaction variant on Windows, plus a way to extract… | ||
| Printer Hacking Adventures | Peter Geissler | 45m |
Extracts RSA keys from a Lexmark binary to decrypt FLS firmware blobs with a custom FLS decrypt tool, then chains a WS‑Print SOAP callback -> SSRF -> Fox… | ||
| Panel: Responsible Disclosure And (Legal) Risks For Security Researchers | Diana Nadeborn, Andreas Bogk, Michał Kowalczyk, Jan Tilo Kirchhoff | 40m |
Reverse engineering of train software reveals trains refuse service by detecting hardcoded GPS coordinates that list competitor workshops and a hidden… | ||
| Prize Ceremony | Antriksh Shah | 09m |
Live bug bounty targets Nestle and Integrity manages triage with 50 bugs reported, 20 high-severity and one exceptional finding; prizes go to online winners… | ||
| Opening Note | Antriksh Shah | 08m |
Conference opens with a packed program: 15 talks, 2 workshops, 1 panel across two days, about 65 companies exhibiting and roughly 10 CFP submissions selected… | ||
| nothing matches | ||