BalCCon - Balkan Computer Congress·37 min
Kirils Solovjovs
Presents balCCon2k23 - Kirils Solovjovs - MITM on PSTN - novel methods for intercepting phone calls and evaluates key implications for security practitioners.
mitmbalccon2k23kiril+2
mitm
27 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 26 talks / 27 · loading…
Black Hat·34 min
Ali Davanian · Ahmad Darki · Michalis Faloutsos
Industry experts analyze emerging threats surrounding CnCHunter: An MITM-Approach to Identify Live CnC Servers.
cnchuntermitm-approachidentify+2
Black Hat·30 min
Yingjie Cao · Xinfeng Chen
Industry experts analyze emerging threats surrounding Double Tap at the Blackbox: Hacking a Car Remotely Twice with MiTM.
mitmdoubleblackbox+2
Black Hat·48 min
Engineers explore architecture and security mechanisms for USA 2012 - Hookin Aint Easy: BeEF Injection with MITM.
mitminjectionhookin+2
Briefings·40 min
Deral Heiland · Carlota Bindner
Security engineers demonstrate remote exploitation techniques against cellular internet-of-things baseband firmwares and management interfaces.
iothardwarecloud+3
IEEE Symposium on Security and Privacy·20 min
Analysts investigate attack surfaces and defenses concerning MitM Attack by Name Collision: Cause Analysis and Vulnerability Assessment in the New gTLD Era.
mitmvulnerability-assessmentattack+3
nullcon·29 min
Industry experts analyze emerging threats surrounding Goa 2013: A Real Stealth & semi stealth MITM Attack.
mitmstealthsemi+1
nullcon·30 min
Presenters detail vulnerability discovery and exploitation in Goa 2023 | MITM On PSTN: Novel Methods For Intercepting Phone Calls by Kirils Solovjovs.
mitmpstnnovel+2
OWASP Foundation·58 min
Nick Nikiforakis · Bria
Nick Nikiforakis explores Catching Transparent Phish Understanding and Detecting MITM Phishing Kits.
phishingmitmcatching+3
Black Hat Europe·30 min
Masaki Kubo · Yoshiki Mori · Kanta Okugawa
Industry experts analyze emerging threats surrounding One Million ASUS Routers Under Control: Exploiting ASUS DDNS to MITM Admin Credentials.
mitmrouterscredentials
Main Stage·43 min
Dan Petro · David Vargas
Dan Petro and David Vargas disclose over a dozen cryptographic and implementation flaws in the Open Supervised Device Protocol (OSDP) securing physical access control.
osdpaccess-controlmitm+2
Main Stage·50 min
Aapo Oksman
Aapo Oksman introduces certmitm, an automated tool designed to discover and exploit insecure TLS client certificate validation flaws across iOS, Windows 11, and embedded devices.
tlscertificatesmitm+2
BruCON Security Conference·49 min
Felipe Molina · Szymon Ziolkowski
Felipe Molina details 09 - BruCON 0x10 - MitM but for Mail (MaitM).
mitmmailmaitm
Aerospace Village·24 min
Joshua Smailes
Joshua Smailes demonstrates injecting forged digital air traffic control messages via CPDLC, executing man-in-the-middle attacks on oceanic flights.
cpdlcatcmitm+2
Main Stage·45 min
Chad Seaman
Akamai researcher Chad Seaman presents UPnProxyPot, a Golang honeypot that impersonates vulnerable UPnP routers to intercept and MITM blackhat proxy networks.
upnphoneypotmitm+2
Main Stage·47 min
Sagi Sheinfeld · Eyal Karni · Yaron Zinar
Researchers reveal machine-in-the-middle attacks targeting Active Directory authentication protocols, extending relay attacks beyond NTLM to Kerberos and hybrid environments.
active-directorymitmkerberos+3
Aerospace Village·54 min
Matt Gaffney
Analyzes security concerns across the Aircraft Information Services Domain, ARINC 821 networking, and Electronic Flight Bags.
avionicsmitmaviation+2
Crypto Village·45 min
Hanno Böck
Hanno Böck reveals critical flaws in STARTTLS implementations across mail servers and clients, demonstrating command injection and credential theft via protocol downgrade attacks.
starttlstlsemail-security+2
Main Stage·23 min
Shupeng
Baidu Security Lab researcher Shupeng demonstrates constructing test GSM and LTE base stations to intercept 2G/3G/4G traffic and execute machine-in-the-middle attacks on connected smart devices.
cellular-securitybasestationgsm+3
IoT Village·1 hr 9 min
Presenting Btlejuice, an open-source framework for intercepting, modifying, and proxying Bluetooth Smart (BLE) communications via MITM.
bluetoothmitmwireless+1
Main Stage·33 min
bigezy · saci
bigezy and saci demonstrate Pinworm, a tool analyzing and stripping leaking communication metadata in transit across compromised network connections.
metadatamitmtraffic-analysis+2
Main Stage·18 min
Jonathan Christofer Demay · Arnaud Lebrun
Jonathan Christofer Demay and Arnaud Lebrun unveil CANSPY, a modular auditing tool enabling live packet interception, modification, and injection on CAN buses.
can-busautomotive-securityhardware+2
Main Stage·45 min
Alex Chapman · Paul Stone
Alex Chapman and Paul Stone unveil vulnerabilities in Web Proxy Auto-Discovery (WPAD), demonstrating forced proxy hijacking and HTTPS interception across major browsers.
wpadproxy-bypasshttps-interception+2
Presentations Crypto·50 min
Jose Selvi
Jose Selvi demonstrates how manipulating Network Time Protocol (NTP) synchronisation allows bypassing SSL/TLS certificate expiration checks and HSTS protections.
ssltlsntp+2