VUSec

@UC9WimJoKklmni4feJD9bdhw - 1.2K subscribers

Systems and Network Security Group at VU Amsterdam

Home Videos Live Playlists

Indirect Target Selection (ITS): End-to-end exploit on Intel CPUs with Training Solo

Indirect Target Selection (ITS): End-to-end exploit on Intel CPUs with Training Solo VUSec

179 views - 9 months ago

L1TF Reloaded VUSec

235 views - 9 months ago

Native BHI Exploit: Leaking the /etc/shadow file

Native BHI Exploit: Leaking the /etc/shadow file VUSec

5.1K views - 2 years ago

FineIBT Bypass PoC | Native BHI

FineIBT Bypass PoC | Native BHI VUSec

564 views - 2 years ago

SLAM: Spectre based on Linear Addres Masking

SLAM: Spectre based on Linear Addres Masking VUSec

5.5K views - 2 years ago

Branch History Injection (BHI) exploit leaking root entry in /etc/shadow

Branch History Injection (BHI) exploit leaking root entry in /etc/shadow VUSec

12K views - 4 years ago

RIDL-TAA leaking root password hash in seconds

RIDL-TAA leaking root password hash in seconds VUSec

271 views - 4 years ago

CrossTalk: Speculative Data Leaks Across Cores Are Real

CrossTalk: Speculative Data Leaks Across Cores Are Real VUSec

300 views - 4 years ago

Floating-Point Value Injection (FPVI) exploit in Firefox

Floating-Point Value Injection (FPVI) exploit in Firefox VUSec

731 views - 5 years ago

BlindSide - Exploit 3: Breaking XoM with speculative probing to mount a kernel JIT-ROP exploit

BlindSide - Exploit 3: Breaking XoM with speculative probing to mount a kernel JIT-ROP exploit VUSec

336 views - 5 years ago

BlindSide - Exploit 2: Breaking FGKASLR with speculative probing to leak the root password hash

BlindSide - Exploit 2: Breaking FGKASLR with speculative probing to leak the root password hash VUSec

389 views - 5 years ago

BlindSide - Exploit 1: Breaking KASLR with speculative probing to mount a kernel ROP exploit

BlindSide - Exploit 1: Breaking KASLR with speculative probing to mount a kernel ROP exploit VUSec

6.9K views - 5 years ago

SecurePay talk at EuroS&P 2020

SecurePay talk at EuroS&P 2020 VUSec

169 views - 5 years ago

CrossTalk (SRBDS) leaking SGX key across CPU cores in 1 second

CrossTalk (SRBDS) leaking SGX key across CPU cores in 1 second VUSec

4.6K views - 6 years ago

RIDL leaking root entry in /etc/shadow in 4 seconds

RIDL leaking root entry in /etc/shadow in 4 seconds VUSec

4.1K views - 6 years ago

RIDL-TAA leaking full root password hash in seconds

RIDL-TAA leaking full root password hash in seconds VUSec

13K views - 6 years ago

NetCAT remotely leaking keystrokes from a victim SSH session

NetCAT remotely leaking keystrokes from a victim SSH session VUSec

31K views - 6 years ago

RIDL leaking root password hash

RIDL leaking root password hash VUSec

29K views - 7 years ago

RIDL from JavaScript

RIDL from JavaScript VUSec

17K views - 7 years ago

ASPLOS'19 lightning talk - kMVX: Detecting Kernel Information Leaks with Multi-variant Execution

ASPLOS'19 lightning talk - kMVX: Detecting Kernel Information Leaks with Multi-variant Execution VUSec

358 views - 7 years ago

PRIME + PROBE (counter)

PRIME + PROBE (counter) VUSec

353 views - 7 years ago

XLATE + PROBE (text)

XLATE + PROBE (text) VUSec

66 views - 7 years ago

FLUSH + FLUSH (text)

FLUSH + FLUSH (text) VUSec

41 views - 7 years ago

XLATE + PROBE (counter)

XLATE + PROBE (counter) VUSec

246 views - 7 years ago

FLUSH + FLUSH (counter)

FLUSH + FLUSH (counter) VUSec

82 views - 7 years ago

FLUSH + RELOAD (text)

FLUSH + RELOAD (text) VUSec

809 views - 7 years ago

PRIME + PROBE (text)

PRIME + PROBE (text) VUSec

364 views - 7 years ago

FLUSH + RELOAD (counter)

FLUSH + RELOAD (counter) VUSec

210 views - 7 years ago

TLBleed teaser VUSec

116 views - 7 years ago

GLitch exploit - Firefox 57 (Nexus 5)

GLitch exploit - Firefox 57 (Nexus 5) VUSec

15K views - 8 years ago

PIROP exploit injecting shellcode in Asterisk (EuroSP '18)

PIROP exploit injecting shellcode in Asterisk (EuroSP '18) VUSec

1K views - 8 years ago

PIROP exploit launching a shell in Asterisk (EuroSP '18)

PIROP exploit launching a shell in Asterisk (EuroSP '18) VUSec

554 views - 8 years ago

Newton CSCFI Demo (CCS '17)

Newton CSCFI Demo (CCS '17) VUSec

487 views - 8 years ago

hardwear.io: Shaking Trust in Hardware: Attacks on hardware from software

hardwear.io: Shaking Trust in Hardware: Attacks on hardware from software VUSec

307 views - 8 years ago

AnC or ASLR^Cache demonstration in Firefox

AnC or ASLR^Cache demonstration in Firefox VUSec

32K views - 9 years ago

Fast version of AnC

Fast version of AnC VUSec

20K views - 9 years ago

Allocation Oracles Talk (SEC '16)

Allocation Oracles Talk (SEC '16) VUSec

78 views - 9 years ago

Thread Spraying Talk (SEC '16)

Thread Spraying Talk (SEC '16) VUSec

136 views - 9 years ago

Flip Feng Shui Talk (SEC '16)

Flip Feng Shui Talk (SEC '16) VUSec

394 views - 9 years ago

Drammer on Android 6.0.1

Drammer on Android 6.0.1 VUSec

66K views - 9 years ago

Stagefright + drammer

Stagefright + drammer VUSec

21K views - 9 years ago

Allocation Oracles Demo (SEC '16)

Allocation Oracles Demo (SEC '16) VUSec

181 views - 9 years ago

Flip Feng Shui Lightning Talk (SEC '16)

Flip Feng Shui Lightning Talk (SEC '16) VUSec

3.8K views - 9 years ago

Flip Feng Shui Demo (SEC '16): APT+GPG Cross-VM Exploit

Flip Feng Shui Demo (SEC '16): APT+GPG Cross-VM Exploit VUSec

1.7K views - 9 years ago

Flip Feng Shui Demo (SEC '16): SSH Cross-VM Exploit

Flip Feng Shui Demo (SEC '16): SSH Cross-VM Exploit VUSec

7.7K views - 9 years ago

OSIRIS Demo (DSN '16)

OSIRIS Demo (DSN '16) VUSec

239 views - 10 years ago

Dedup Est Machina Demo (S&P '16)

Dedup Est Machina Demo (S&P '16) VUSec

621 views - 10 years ago

PathArmor Demo (CCS '15) — Part 1/2: Unprotected multiple runs

PathArmor Demo (CCS '15) — Part 1/2: Unprotected multiple runs VUSec

279 views - 10 years ago

PathArmor Demo (CCS '15) — Part 2/2: Protected multiple runs

PathArmor Demo (CCS '15) — Part 2/2: Protected multiple runs VUSec

240 views - 10 years ago

DataTracker Demo (IPAW '14)

DataTracker Demo (IPAW '14) VUSec

138 views - 10 years ago

Proteos Demo (ASPLOS '13)

Proteos Demo (ASPLOS '13) VUSec

200 views - 10 years ago

MCR Demo (Middleware '14)

MCR Demo (Middleware '14) VUSec

68 views - 10 years ago

MemBrush Demo (WCRE '13)

MemBrush Demo (WCRE '13) VUSec

184 views - 10 years ago