CoreLabs Information Security Publications

Below is an index of publications, presentations and papers authored by members of the CoreLabs research team. Click on any title to get more information and access the publication on the CoreLabs extranet site.

Title Venue / Publication Publication Date
HoneySAP: Who really wants your money Troopers
Deep Boot Ekoparty
Anécdotas de seguridad Congreso Nacional de Estudiantes de Ingenieria en Sistemas de Informacion (CNEISI) 2012
Pass-the-Hash Toolkit for Windows HITB SECONF 2008 and Buenos Aires Conference (Ba-Con '08)
About Exploits Writing, Gerardo Richarte G-CON 1, ITESM Campus Estado de Mexico, Mexico
Four different tricks to bypass StackShield and StackGuard protection Corelabs Technical Report
Using AI Techniques to improve Pen Testing Automation Hackito Ergo Sum (HES), Paris, France
MD5 to be considered harmful today PacSec'05 Conference, Tokyo, Japan.
Abusing the Windows WiFi native API to create a Covert Channel Hack.lu 2011
SAP’s Network Protocols Revisited Troopers 2014 Conference
HTML5 Heap Sprays, Pwn All The Things EuSecWest 2012
Syscall Proxying - Simulating remote execution Black Hat USA '03
Power Save Denial of Service in 802.11 Networks Ekoparty 2009
Windows SMEP bypass: U=S Ekoparty
Pentesting en AWS AWS User Group Argentina
802.11 Massive Monitoring DEF CON 23
Attack Planning in the Real World AAAI 2010
Core Impact: Penetration Test Automation White paper
Deactivate the Rootkit Black Hat USA 2009
Modifying Windows NT Logon Credential Corelabs Technical Report
Breaking Out of VirtualBox through 3D Acceleration REcon 2014
Uncovering SAP vulnerabilities: reversing and breaking the Diag protocol Defcon 20 Conference
Automating Penetration Tests, Iván Arce - Presentation at the SANS I/O Wargames 2001 conference SANS I/O Wargames conference, September 2001, Washington D.C. USA
An Algorithm to Find Optimal Attack Paths in Nondeterministic Scenarios ACM CCS Conference 2011
Vulnerability Management at the Crossroads, part I Network Security