Contenu à venir

Combining dynamic with static analysis is the key to quickly solving many challenges when performing binary analysis. Have you ever thought about combining Radare2 with Frida? This combination has given birth to “r2frida”, an IO plugin that allows you to put the power of Frida into r2land.

During this workshop, we will walk you through how to use r2frida, primarily on mobile apps. Attendees will learn about offensive mobile security, e.g how to unpack malware, bypass jailbreak protections, SSL pinning, anti-debugging or even Frida detections using Frida itself.

The workshop is suitable for pentesters, reversers, malware analysts and mobile developers who want to learn more about mobile security

Découvrez le monde des transmissions radios et familiarisez-vous avec les logiciels GQRX, inspectrum et GNURadio !

Apprenez à identifier, manipuler et décoder des signaux radio de la FM, des TPMS de voiture ou encore du GSM au travers d’exercices pratiques réels.

Ce workshop permettra aux participants d’acquérir les bases et de démystifier le Software Defined Radio.

Android est le système d’exploitation mobile le plus utilisé au monde. Il met en œuvre la plupart des protections modernes, côté noyau, visant à assurer le cloisonnement entre applications et l’intégrité du noyau.

Dans cet atelier, nous présenterons ces protections et étudierons leur implémentation. Le fil rouge de l’atelier sera l’exploitation d’une vulnérabilité sur un émulateur Android.

Nous clôturerons l’atelier par la mise en perspective des mesures de sécurité supplémentaires que l’on rencontre sur les périphériques du commerce.

Hardware security is going more and more deeper. Hardware as root of trust is the heart of every secure operation. There are several devices and integrated components, made for security reasons, and among these we find the Trusted Platform Module.

Unfortunately, using secure hardware by itself is not enough. The manufacturers must use these components appropriately by designing security measurements into each step of the firmware execution.

In this presentation we would like to highlight the security weaknesses of the Bitlocker and Trusted Platform Module, focusing on how they can be exploited to gain access to personal data and the operating system. These weaknesses could on the one hand lead a malicious user to access sensitive information and on other could help the Red Teaming assessment or Digital Forensics analysis.
Finally will be present a tool made by our team to exploit these security flaws.

The purpose of this presentation is to describe the Trusted Platform Module and its use in the Bitlocker software architecture, highlighting the main security weaknesses.

The TPM is an integrated component present in most of our personal computers and not only that. It provides a series of security features to ensure, for example, the storage of cryptographic keys and the execution of sensitive routines in Trusted Execution Environment. Furthermore, we will also describe tools like Bitlocker, which use the TPM to increase security and guarantee user privacy.We will then go on to analyze in detail the tool and its basic functionality and the various ways it can be used, before moving on to security implications, vulnerability and weakness software features, that allow a malicious user to access sensitive data and the operating system.

Finally, we will show a tool created by our team which decodes part of the communication between BIOS and TPM in order to obtain the cryptographic key used by the software to encrypt the disk.

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation, and organization, continuous monitoring, backed by a database, and a simple yet intuitive User Interface.

reNgine makes it easy for penetration testers to gather reconnaissance and gather vulnerabilities with minimal configuration and with the help of reNgine’s correlation, it just makes recon effortless.

reNgine has some of the most advanced features on any recon tools like data correlation and organization, the custom query “like” language for recon data filtering, screenshot gallery with filtering options, powerful and highly configurable scan engines, customizable notifications to discord, slack or telegram, automatic vulnerability reporting to Hackerone, support for GF pattern matching, OSINT, Recon Data Visualization, Support for Recon Notes and Todos, Perform Advanced Query lookup using natural language alike and, or, not operations, and proxy support.

reNgine also introduces the ability to automatically find interesting subdomains, tagging targets, and find recon data changes, like how many subdomains are newly discovered or no longer exist and also reNgine supports Clocked Scans (Run reconnaissance exactly at X Hours and Y minutes) and Periodic Scans (Runs reconnaissance every X minutes/hours/days/week)

reNgine aims to address the shortcomings of traditional recon workflow using these features.

This tool demo/talk will be a walkthrough on reNgine, on how organizations or individuals could make the best out of reNgine for continuous monitoring and reconnaissance.

One can think that the priority of an osint investigation is to obtain results on the target. Nevertheless, it is essential to implement all the operational security measures (opsec) so that the target is not aware of the investigations in progress on it. In this lecture we will see an introduction of the do’s and don’t that can guarantee or compromise your investigations.

Le modèle économique prédateur des Big Tech, théorisé sous l’angle du “capitalisme de surveillance”, est-il devenu une source de tensions géopolitiques en raison du RGPD, des afficionados de Mastodon ou de Cambridge Analytica ? La protection des infrastructures critiques contre la cybercriminalité opportuniste relève-t-elle uniquement des équipes cybersécurité ou devrait-elle être prise au sérieux pour le politique et le législateur ?

En réalité, quel que soit l’exemple qu’on prend, l’intimité entre le personnel, le sociétal et le numérique est actée. Que ça nous plaise ou pas, on est tous l’utilisateur final de quelqu’un. Mais le fossé entre l’impact que cette situation a sur nous et la maîtrise qu’on peut avoir de cette situation ne cesse de s’élargir. Si l’on sort du personnel (moi face à mon écran) pour embrasser une vision sociétale, ces défis sont multipliés d’autant. Et continue à se poser la même question : à partir de quel moment, un sujet technique devient-il un sujet de gouvernance et de politique ?

Brève conférence pour tenter une sensibilisation des visiteurs et participants très technophiles aux sujets de fabrique de la loi, où je tenterai de leur expliquer comment hacker son élu-e à travers quelques exemples concrets.

Contenu à venir