Christian Becker: "Red Team Exercises - A case study"

Rene Freingruber: "An overview on modern fuzzing techniques"

Gertjan Franken: "Who left open the cookie jar? ..."

Michele Orrù: "All your sessions are belong to us"

Johannes Dahse: "State-of-the-art PHP Exploitation Techniques"

Mathy Vanhoef: "KRACKing WPA2 and Mitigating Future Vulnerabilities"

Ange Albertini: "Beyond your studies - You studied X at Y. Now what?"

Florian Kohlar: "Tales from an IT-Security consultant"

Enno Rey: "Properties of IPv6 and Their Implications for Offense & Defense"

Mario Heiderich: "My Sweet Innocence Exposed - Eleven Reasons why we will all miss you, 'e'"

Victor van der Veen: "Drammer: The Making-Of"

Johannes Dahse: "An Advent Calendar full of PHP Security Bugs"

Martin Schmiedecker: "Turning Incident Response to Eleven"

Anders Fogh: "Covert shotgun: Automatically finding covert channels in SMT"

Clémentine Maurice: "Reverse-engineering CPUs for fun and profit"

Tom Van Goethem: "Breaking privacy and security by abusing cross-origin resource size"

Ben Stock: "From Facepalm to Brain Bender - Exploring Client-Side Cross-Site Scripting"

Christian Rossow: Zeus P2PWNED: Monitoring and Disrupting Modern P2P Botnets

Hanno Böck: "TLS - the most important crypto protocol"

Sven Schlueter: "Modern penetration testing"

Dirk Wetter: "Intricacies testing SSL: sockets, schools, threa{t,d}s and sometimes no shake-hands"

Ibrahim Köse: "Managing Security Testing"

Michele Orru: Dark FairyTales from a Phisherman (Vol. III)

Matthias Kaiser - Exploiting Deserialization Vulnerabilities in Java

Christian Schneider – Security DevOps - Free pentesters' time to focus on high-hanging fruits

Sebastian Lekies - 25 Million Flows Later: Detection and Exploitation of DOM-based XSS ...

Frederik Braun – Using a CDN that can not XSS you - with Subresource Integrity

Thomas Patzke - Near Field Communication Security

Joern Schneeweisz - Bug Tales

Sebastian Schinzel - Remote Timing Attacks

Johannes Dahse: Static Detection of Vulnerabilities in Modern PHP Applications

Collin Mulliner - Hidden GEMs: Automated Discovery of Access Control Vulnerabilities in GUIs

Alex Inführ - Adobe Reader - Pictures and Text on Steroids

Steven Van Acker - A Hero´s guide to taming the JavaScript beast

Mathias Karlsson - Polyglot payloads in practice

Mathias Bynens - Hacking with Unicode

Felix Gröbert - Security Analysis of Apple FileVault2

Mike West - Locking Down the User Agent

Stefan Esser - iOS 7 Security Overview

Miroslav Stampar - Curious Case of SQLi

Fabian Yamaguchi - Information Retrieval and Machine Learning for Interactive Bug Hunting

Andreas Kurtz - Pentesting iOS Apps, Runtime Analysis and Manipulation

Karsten Nohl - In depth crypto attacks, It always takes two bugs

Giorgio Maone - Defending the Indefensible, The Unsung Battles and Legacy of NoScript

Matthias Kaiser - Recent Java Exploitation Techniques

Jeremiah Grossman - The Real State of Website Security

Jürgen Pabel - Information Security Management - A Hacker's Perspective

Felix 'FX' Lindner - Security is Privacy, Future Research

Svetlana Gaivoronski - Shellcode detection techniques

Sandro Gauci - Webapp Exploit Payloads tools built for & during the job

Ange Albertini - A challenge in your pocket, an introduction to brainteasers

Jonas Magazinius - Crossing origins by crossing formats

Tuomas Kärkkäinen - Fuzzing at Scale and in Style

Soroush Dalili - File in the hole!

Roberto Suggi Liverani - Cross Context Scripting XCS; Attacks and Exploitation

Paul Stone - Browser Timing Attacks via the Graphics Stack

Nicolas Gregoire - Attacking ?xml? processing

Arthur Gerkis - Dynamic PHP web appliaktion analysis

Abraham Aranguren Legal and Efficient Web App Testing Without Permission

Alexey Sintsov - Lotus Domino Penetration Through the Controller