Nullcon Goa 2023
| title | author | length |
|---|---|---|
| Aftermovie | 02m | |
A fast montage captures Nullcon Goa 2023 as a bustling highlight reel showing panels, parties and hallway conversations, claiming 2900+ attendees, 70+ speakers… | ||
| Keynote: Multiplying Threat Intelligence | John Lambert | 34m |
Outlines concrete ways to generate more threat intelligence: collect and retain broad logs so every attacker contact leaves a trace, pivot from host to… | ||
| Smashing The State Machine: The True Potential Of Web Race Conditions | James | 44m |
A precise exploit technique called the single packet attack packs ~20–30 HTTP requests into one TCP packet to eliminate network jitter; benchmarks from… | ||
| How I Hacked Your Bank Account: A Detailed Look At UPI Security | Nemo | 21m |
Independent reverse engineering of multiple UPI apps while at Razorpay finds a simple but wide-impact flaw: an Android banking app trusts the client-submitted… | ||
| Android-SigMorph: Covert Communication Exploiting Android Signing Schemes | Ayan Saha, Achute Sharma | 41m |
Demonstrates how V2/V3 signing leaves unprotected regions inside the APK signing block so a signed APK can be modified in hex without breaking its signature… | ||
| Securing CI/CD Pipelines: Exploring Vulnerabilities In Workflows | Siddharth | 44m |
A staged static taint analysis called Argus analyzes GitHub Actions by generating action taint summaries, converting workflows to an intermediate… | ||
| Uncovering Azure's Silent Threats: A Journey Into Cloud Vulnerabilities | Nitesh Surana | 52m |
Researcher finds five vulnerabilities in Azure Machine Learning across three issue classes (CVE-2023-23312, CVE-2023-28312), demonstrates cleartext storage… | ||
| MITM On PSTN: Novel Methods For Intercepting Phone Calls | Kirils Solovjovs | 30m |
Combines Caller ID spoofing, SIP trunks and a VoIP gateway with simultaneous ring interception to record both sides by calling A as B and B as A, patching… | ||
| Hacking Mitsubishi PLC Without Access To Firmware | Anton Dorfman | 40m |
Reconstructs the undocumented Mitsubishi network protocol for the Mitsubishi FX5U PLC using the jig Works 3 simulator, Process Explorer, debugger-assisted… | ||
| Lens Of Deceit: Unmasking And Altering Camera Sunglasses' Footage | Daniel Schwendner | 24m |
Reverse engineering uncovers a full_build=true firmware download from graph.facebook.com yielding a ~330 MB ZIP and a ~500 MB system image, revealing a Stella… | ||
| Reverse Engineering RGB Keyboard Backlights With Linux Kernel Drivers | Rishit Bansal | 31m |
Reverse engineers a closed-source HP Omen 4‑zone RGB system with ILSpy to extract WMI GUIDs and the integer opcodes, uses IASL to decompile ACPI AML and maps… | ||
| Sponsor Interview | abishek bakshi | 02m |
Company describes an AI-powered threat intelligence platform with a stated USP in dark web monitoring and a product called CyberVision for Enterprise aimed at… | ||
| Sponsor Interview | 01m | |
Microsoft Security Response Center describes running a global bug bounty program and hosting a recruitment party that engages dozens of security researchers… | ||
| Sponsor Interview | Sumit barav | 02m |
Airtel announces a live bug bounty on multiple Airtel assets with a headline 10 lakh reward for whoever clears the final level, describing an active… | ||
| Sponsor Interview | Sachin AA | 01m |
HackerOne describes itself as a bug bounty platform that connects organizations with ethical hackers and researchers, coordinating vulnerability reports and… | ||
| Panel: Cyber Operations, Doctrine, And Geo-Politics | Anand Venkatanaryanan, John Lambert, Manu Zacharia | 43m |
Panel summarizes how attribution moves from heuristic names to a repeatable process: a new weather-based taxonomy replaces periodic table names and links… | ||
| The Convergence Of EBPF, Buildroot, And QEMU For Automated Linux Malware Analysis | Nikhil Hegde | 23m |
An automated pipeline that combines ELFEN sandbox with Buildroot-built QEMU images and the lightweight ply tracer uses eBPF kprobes/kretprobes/tracepoints to… | ||
| Unlocking Any Door In 21st Century. Immersion In Bio-Security | Timur Yunusov, Aleksandra Murzina | 41m |
Three commercial biometric devices are reverse engineered: airport-grade terminal, an infrared-only time clock, and a consumer AI doorbell. Firmware extraction… | ||
| Cracking With Automated USB Fuzz | Subba Bachina, Conna | 27m |
A modern USB fuzzing platform called USB Studio uses a microcontroller with two USB ports and a self‑powering rail to keep fuzzing after host crashes, drives… | ||
| Critical Information Infrastructure (CII) Protection: Challenges & Opportunities | Saikat Datta, Navin Kumar Singh, MV Shashadri, Mathan Baby Kasilingam, Madhavi Purandare | 01h 05m |
National CII body reports about 100 notified entities across seven sectors and says threat feeds it shares generate a 25–30% IOC hit rate versus 1–2% from… | ||
| The Curious Case Of The Rogue SOAR | Jaden Furtado, Mukesh Kumar | 31m |
Finds a command‑injection in Shuffler where the Liquid templating engine substitutes unescaped webhook inputs into a shell executed as root inside isolated… | ||
| IoT Hacking 101: Reverse Engineering The Xiaomi Ecosystem | Dennis Giese | 52m |
Shows concrete exploits and methods: uses UART/JTAG/SWD and cheap tools (Raspberry Pi, multimeter, hot‑air, USB microscope, eMMC/SPI readers) to dump firmware… | ||
| Deconstructing The Beast: A Deep Dive Into JIT Compilation Attacks In iOS | Shubham Sharma | 24m |
Overview of iOS layers and why compilation matters leads to a focused look at JavaScriptCore JIT inside Safari, concrete exploit classes — JIT spraying, bypass… | ||
| Self-Signed, Why Not! Exploiting Insecure Certificate Validation In iOS And macOS | Aapo Oksman | 46m |
Automated TLS MITM tool certmitm actively generates and injects self-signed certificates and other test cases by freezing the TLS client hello, then probes… | ||
| Jailbreaking The Apple HomePod: Fun With Checkm8 And Smart Speakers | Linus Henze | 49m |
Achieves BootROM code execution on HomePod via the checkm8 exploit, remaps a bootrom page into SRAM to disable signature checks and uses a tethered-boot tool… | ||
| nothing matches | ||