Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Attack Surface Analysis

Showing: 36 courses

Burp Suite - Basic Concepts for Web Pentesting

0 rewiews
Learn essential web pentesting techniques using Burp Suite, covering parameter passing, code injection, XSS, LFI/RFI attacks, and SQL injection for effective security testing of web applications.
Add to list
9 Lesons
1 hour 30 minutes
On-Demand
Free-Video
HackerOne

Security at Government Agencies - Hacking the US Government

0 rewiews
Experts discuss hacking US government systems, vulnerability disclosure programs, and cybersecurity challenges in federal agencies. Insights on bug bounties, tech surges, and public-facing systems.
Add to list
14 Lesons
41 minutes
On-Demand
Free-Video
BruCON Security Conference

Attack Surface and Security Implications of eSIM Technology

0 rewiews
Explore the security vulnerabilities and potential risks associated with eSIM technology in mobile phones and desktop devices, raising awareness about offensive operations and post-compromise scenarios.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
OffensiveCon

Embedded Threats: A Deep Dive into the Attack Surface and Security Implications of eSIM Technology

0 rewiews
Explore the attack surface and security implications of eSIM technology through a comprehensive deep dive into embedded threats.
Add to list
1 Lesons
54 minutes
On-Demand
Free-Video

Comparing Risks: Why Asset Management Is Broken and How to Fix It

0 rewiews
Explore innovative approaches to asset management in cybersecurity, focusing on risk comparison, vulnerability prioritization, and effective remediation strategies for improved security outcomes.
Add to list
29 Lesons
52 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Cloud Native Application Threat Modeling and Adversary Emulation - Techniques and Tools

0 rewiews
Explore threat modeling and adversary emulation techniques for cloud-native applications, including methodologies, tools, and strategies to identify and mitigate security risks in dynamic cloud environments.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Three Surprising Kubernetes Networking Features and How to Defend Against Them

0 rewiews
Explore surprising Kubernetes networking vulnerabilities and learn effective defense strategies to protect your clusters from potential attacks and compromises.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Day in the Life of a Base Image - The Evolution of Vulnerabilities in Popular Containers

0 rewiews
Explore the evolution of vulnerabilities in popular container images, understand security challenges, and learn practical steps to manage and prevent issues in your development process.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Linux Foundation

What We Learned Dissecting the World's Most Popular Containers

0 rewiews
Explore insights from analyzing popular containers, covering size, complexity, package landscape, and security vulnerabilities to enhance container management and optimization strategies.
Add to list
14 Lesons
30 minutes
On-Demand
Free-Video
OWASP Foundation

OWASP IoT Top 10 - Understanding Security Issues in Internet of Things

0 rewiews
Explore key security vulnerabilities in IoT technologies and learn strategies to build, deploy, and assess IoT systems more securely with insights from the OWASP Internet of Things Project.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
Recon Conference

Subverting Your Server Through Its BMC - The HPE iLO4 Case

0 rewiews
Exploración profunda de la seguridad de HP iLO4, incluyendo análisis del firmware, vulnerabilidades y una nueva técnica de explotación para comprometer el sistema operativo del servidor host a través de DMA.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
WEareTROOPERS

Old New Things - An Examination of the Philips TriMedia Architecture

0 rewiews
Explore the Philips TriMedia architecture, examining its history, features, and potential vulnerabilities through firmware analysis and hardware exploration.
Add to list
15 Lesons
37 minutes
On-Demand
Free-Video
LASCON

Simplifying Threat Modeling

0 rewiews
Simplified approach to threat modeling: identify attack surfaces, visualize users as threats, illuminate assets and trust boundaries, postulate attacks, evaluate impact, and mitigate risks.
Add to list
23 Lesons
44 minutes
On-Demand
Free-Video
LASCON

Building an AppSec Program from the Ground Up - An Honest Retrospective

0 rewiews
Learn from a 2-year journey building an AppSec program, covering successes, failures, goal-setting, and execution. Gain insights on static analysis, threat modeling, metrics, and more for effective security implementation.
Add to list
25 Lesons
56 minutes
On-Demand
Free-Video
Black Hat

Analyzing & Breaking QNX Exploit Mitigations and PRNGs for Embedded Systems

0 rewiews
Dissection of QNX's security features, including exploit mitigations and random number generators, for embedded systems in automotive, industrial, defense, and medical sectors.
Add to list
47 Lesons
54 minutes
On-Demand
Free-Video

Rawr - Rapid Assessment of Web Resources

0 rewiews
Explore rapid web resource assessment techniques, including crawling, scanning, and fuzzing, to enhance cybersecurity and identify potential vulnerabilities in web applications.
Add to list
20 Lesons
47 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Fuzzing File System Implementations to Uncover Security Bugs

0 rewiews
Explore file system vulnerability research through fuzzing techniques on BSD systems. Learn to identify attack surfaces, automate testing, and uncover security bugs in kernel implementations.
Add to list
23 Lesons
57 minutes
On-Demand
Free-Video
Black Hat

Subverting Sysmon - Application of a Formalized Security Product Evasion Methodology

0 rewiews
Explore methodologies for subverting Sysmon, a security monitoring tool, through data collector strategies and configuration analysis to enhance adversarial techniques against enterprise defenses.
Add to list
8 Lesons
50 minutes
On-Demand
Free-Video
Black Hat

Review and Exploit Neglected Attack Surfaces in iOS 8

0 rewiews
Explores overlooked iOS 8 vulnerabilities through fuzzing and code auditing, revealing system daemon crashes and memory corruption errors triggerable via XPC, plus an iOS kernel 0day.
Add to list
1 Lesons
51 minutes
On-Demand
Free-Video
Black Hat

Understanding the Attack Surface and Attack Resilience of Project Spartan's New EdgeHTML Rendering Engine

0 rewiews
Explore EdgeHTML's attack surface, compare it with MSHTML, and analyze exploit mitigations in Windows 10's new rendering engine for enhanced web security understanding.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Black Hat

DOG of WAR - Attack Box Design

0 rewiews
Explore attack box design strategies and techniques for penetration testing and security assessments in this comprehensive presentation by Scott Blake.
Add to list
1 Lesons
51 minutes
On-Demand
Free-Video
NahamSec

Scaling Up - Automated Attack Surface Discovery with Intrigue Core

0 rewiews
Explore automated attack surface discovery using Intrigue Core for efficient cybersecurity scaling. Learn techniques to identify vulnerabilities and enhance your security posture.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
NahamSec

Finding 0days in Enterprise Web Applications

0 rewiews
Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.
Add to list
32 Lesons
35 minutes
On-Demand
Free-Video
Black Hat

The Linux Kernel Hidden Inside Windows 10

0 rewiews
Explore the Linux kernel in Windows 10, its implementation, security implications, and potential vulnerabilities. Learn about system calls, process management, and attack surfaces in this unique OS integration.
Add to list
17 Lesons
52 minutes
On-Demand
Free-Video
Black Hat

Understanding HL7 2.X Standards - Pen Testing - and Defending HL7 2.X Messages

0 rewiews
Explore HL7 2.X standards in healthcare, learn pen testing techniques for medical systems, and discover strategies to secure HL7 2.X messages against potential vulnerabilities and attacks.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
BSidesLV

Managing Security with the OWASP Assimilation Project

0 rewiews
Explore continuous discovery, scalability, and human monitoring in cybersecurity with the OWASP Assimilation Project. Learn about architecture, attack surface analysis, and practical demonstrations.
Add to list
14 Lesons
40 minutes
On-Demand
Free-Video
USENIX

Hell of a Handshake - Abusing TCP for Reflective Amplification DDoS Attacks

0 rewiews
Explores TCP-based amplification DDoS attacks, revealing vulnerabilities in the handshake process and identifying thousands of potential amplifiers through Internet-wide scans of common TCP protocols.
Add to list
1 Lesons
16 minutes
On-Demand
Free-Video
Black Hat

BLEEDINGBIT - Your APs Belong to Us

0 rewiews
Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.
Add to list
33 Lesons
47 minutes
On-Demand
Free-Video
Black Hat

Reflections on Trusting TrustZone

0 rewiews
Explore TrustZone security, vulnerabilities, and exploitation techniques in ARM devices. Gain insights into real-world implications and see a live demonstration of bootloader unlocking.
Add to list
25 Lesons
39 minutes
On-Demand
Free-Video
Black Hat

PinPadPwn

0 rewiews
Explore vulnerabilities in payment terminals, including memory corruption issues and potential attack vectors. Learn about code execution risks and discuss profitable payloads for attackers.
Add to list
1 Lesons
59 minutes
On-Demand
Free-Video
USENIX

Attacks are Forwarded - Breaking the Isolation of MicroVM-based Containers Through Operation Forwarding

0 rewiews
Explores vulnerabilities in microVM-based containers, demonstrating operation forwarding attacks that can break isolation, exploit host kernel vulnerabilities, and exhaust resources on public cloud platforms.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video

Hacking Identity - A Pen Tester's Guide to IAM - Jerod Brennen

0 rewiews
Comprehensive guide to identity and access management security, covering attack surfaces, pen testing processes, and best practices for securing user lifecycles and admin privileges.
Add to list
18 Lesons
1 hour 2 minutes
On-Demand
Free-Video
Black Hat

PMFault - Voltage Fault Injection on Server Platforms Through the PMBus

0 rewiews
Explore voltage fault injection attacks on server platforms via PMBus, revealing vulnerabilities in power management systems and discussing potential security implications for data centers.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
NDC Conferences

Security and Microservices

0 rewiews
Explore microservices security: defense in depth, distributed architecture protection, and strategies to enhance data safety while minimizing attack surfaces.
Add to list
38 Lesons
53 minutes
On-Demand
Free-Video
RSA Conference

Securing Software Supply Chain - Problems, Solutions, and AI/ML Challenges

0 rewiews
Explore software supply chain security, recent attacks, frameworks, and SBOM. Learn risk mitigation strategies and tackle AI/ML supply chain challenges in this comprehensive overview.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
USENIX

3D Printer Firmware Attacks on Fused Filament Fabrication - A Systematic Analysis

0 rewiews
Explore firmware attack vulnerabilities in 3D printing systems, examining classification methods, attack vectors, and security implications for fused filament fabrication processes.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video