https://blackwinghq.com/research/talks/Conference presentations by Blackwing Intelligence researchers, with slides and recordings.enWed, 11 Oct 2023 00:00:00 +0000https://blackwinghq.com/research/talks/a-touch-of-pwn/Wed, 11 Oct 2023 00:00:00 +0000https://blackwinghq.com/research/talks/a-touch-of-pwn/Microsoft engaged us to evaluate the security of the top fingerprint sensors used for Windows biometric authentication. This presentation details our vulnerability research process, which entailed extensive reverse engineering of software and hardware, breaking cryptographic implementation flaws in a custom TLS, and deciphering and reimplementing proprietary protocols, to go from very little knowledge about biometric authentication to a full bypass of Windows Hello authentication on all three of our research targets.https://blackwinghq.com/research/talks/nfc-hacking-the-easy-way/Sat, 28 Jul 2012 00:00:00 +0000https://blackwinghq.com/research/talks/nfc-hacking-the-easy-way/Eddie Lee presents NFCProxy, a proof-of-concept tool that demonstrates insecurities in near field communication and contactless credit cards. The tool is also useful for NFC protocol analysis in further research.https://blackwinghq.com/research/talks/irk-osx-kernel-rootkits/Thu, 07 Aug 2008 00:00:00 +0000https://blackwinghq.com/research/talks/irk-osx-kernel-rootkits/Apple’s OS X operating system has been gaining in popularity. This presentation details how to manipulate the OS X kernel in order to hide an attacker’s activities and maintain access.https://blackwinghq.com/research/talks/mach-shellcode-osx-rootkits/Sat, 14 Jun 2008 00:00:00 +0000https://blackwinghq.com/research/talks/mach-shellcode-osx-rootkits/Using the Mach interfaces in the OS X kernel to manipulate the kernel from user space, i.e. from shellcode, to alter kernel structures. Example shellcodes are included.https://blackwinghq.com/research/talks/blackjacking/Sat, 05 Aug 2006 00:00:00 +0000https://blackwinghq.com/research/talks/blackjacking/Jesse D’Aguanno demonstrated using the trust relationship between the BlackBerry Enterprise Server infrastructure and the handhelds to bypass perimeter controls and compromise an internal corporate network.