Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Command Injection

Showing: 39 courses
Joseph Delgadillo

Complete Metasploit System Hacking Tutorial

0 rewiews
Comprehensive tutorial on Metasploit for ethical hacking, covering various attack techniques, payloads, and exploits. Learn to use Meterpreter, perform privilege escalation, and execute remote attacks on different systems.
Add to list
20 Lesons
4 hours 15 minutes
On-Demand
Free-Video

Bug Bounty Methodology

0 rewiews
Learn comprehensive bug bounty techniques, from reconnaissance to vulnerability discovery, with practical tips for successful ethical hacking and reporting security flaws in web applications.
Add to list
28 Lesons
6 hours
On-Demand
Free-Video
Ekoparty Security Conference

A Journey Finding Pre and Post-Auth D-Link Router Zero-Days

0 rewiews
Explora el proceso de descubrimiento y explotación de vulnerabilidades 0-day en routers D-Link, desde obtener acceso al firmware hasta identificar y explotar fallos de seguridad para lograr ejecución remota de código.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
Cyber Mentor

Learn to Hack Live - Command Injection

0 rewiews
Explore command injection vulnerabilities in web applications through live hacking demonstrations and hands-on exercises. Enhance your penetration testing and application security skills.
Add to list
1 Lesons
2 hours 5 minutes
On-Demand
Free-Video
Cyber Mentor

Getting Started with Command Injection

0 rewiews
Learn to exploit Command Injection vulnerabilities with a comprehensive guide covering theory, code review, and hands-on labs to enhance your cybersecurity skills and understanding of this dangerous vulnerability.
Add to list
5 Lesons
13 minutes
On-Demand
Free-Video
OWASP Foundation

HUNT: Data-Driven Web Hacking and Manual Testing

0 rewiews
Turbocharge web hacking with HUNT, a Burp Suite extension using real threat intelligence to provide parameter-level vulnerability suggestions and organize testing methodologies for more thorough assessments.
Add to list
29 Lesons
44 minutes
On-Demand
Free-Video
OWASP Foundation

Why Security Fails and How to Solve It - Lessons from Real-World Assessments

0 rewiews
Explore real-world security failures and innovative solutions with insights from Praetorian's field experiences. Learn actionable steps to enhance cybersecurity through smarter practices and cutting-edge tools.
Add to list
14 Lesons
24 minutes
On-Demand
Free-Video
BSidesLV

Security Pitfalls with Exec Commands in Software Integrations - A Quick Story

0 rewiews
Explore security risks in software integrations, focusing on command injection attacks. Learn detection methods, prevention techniques, and real-world vulnerability analysis through a case study.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Unexpected Intrusion Testing Results in SAP Systems - Critical Vulnerabilities and Exploits

0 rewiews
Unveiling critical vulnerabilities in SAP Start Service, from local to remote exploits. Explores memory corruption and OS command injection leading to root-level RCE, with live demo and recommendations.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
OWASP Foundation

Serverless Infections - Malware in Serverless Computing Environments

0 rewiews
Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
OWASP Foundation

Hacking Fantasy Sports Sites - Mobile App Security Vulnerabilities

0 rewiews
Explore mobile app vulnerabilities through fantasy sports hacking. Learn techniques for intercepting traffic, exploiting formats like JSON and REST, and manipulating data in popular applications.
Add to list
10 Lesons
46 minutes
On-Demand
Free-Video
media.ccc.de

Fuzz Everything, Everywhere, All at Once - Advanced QEMU-Based Fuzzing

0 rewiews
Explore advanced QEMU-based fuzzing techniques for binary-only targets, including command and SQL injection detection, and scalable Android library testing without physical devices.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
DEFCONConference

Command Injection Vulnerabilities in CI/CD Pipelines - Securing Bazel GitHub Actions

0 rewiews
Discover critical security vulnerabilities in CI/CD pipelines through a case study of Bazel GitHub Action, learning practical strategies to protect your projects from command injection attacks.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video

Shot With Your Own Gun: How Appliances Are Used Against You

0 rewiews
Explore how everyday appliances can be exploited for cyberattacks, examining vendor claims, default passwords, and potential vulnerabilities in household devices.
Add to list
14 Lesons
48 minutes
On-Demand
Free-Video
Security BSides San Francisco

Journey to Command Injection - Hacking the Lenovo ix4-300d

0 rewiews
Demonstration of chaining vulnerabilities to remotely exploit a Lenovo NAS device, showcasing command injection, XSS, and CSRF techniques for full system compromise.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
44CON Information Security Conference

Dial V for Vulnerable - Attacking VoIP Phones

0 rewiews
Explore VoIP phone vulnerabilities, attack methods, and security recommendations. Learn firmware access, emulation approaches, and exploit development for various VoIP devices.
Add to list
30 Lesons
41 minutes
On-Demand
Free-Video
DefCamp

Years of IoT Vulnerability Research and Countless 0days - A Retrospective - DefCamp - 2021

0 rewiews
Retrospective on IoT vulnerability research, exploring reusable attack vectors, authentication issues, cloud implementations, and command injection in MQTT and RSTP protocols.
Add to list
17 Lesons
37 minutes
On-Demand
Free-Video
DefCamp

Next-Gen IoT Botnets - Moar Ownage at DefCamp - 2019

0 rewiews
Explore advanced IoT botnet techniques, including hardware hacking, bootloader hijacking, and exploiting vulnerabilities in security cameras and enterprise messaging systems.
Add to list
19 Lesons
43 minutes
On-Demand
Free-Video
Security BSides San Francisco

When Bandit Strikes - Defend Your Python Code

0 rewiews
Discover and defend against common security flaws in Python code using Bandit. Learn customization, CI pipeline integration, and extension techniques for enhanced code security.
Add to list
21 Lesons
26 minutes
On-Demand
Free-Video
Security BSides San Francisco

Owning the Smart Home with Logitech Harmony Hub

0 rewiews
Explore reverse engineering of Logitech's Harmony smart home hub, uncovering vulnerabilities and discussing their implications for device security and potential exploitation.
Add to list
16 Lesons
18 minutes
On-Demand
Free-Video
Black Hat

Command Injection in F5 iRules

0 rewiews
Explore command injection vulnerabilities in F5 iRules, focusing on syntax, exploitation techniques, and security implications for BigIP F5 products used in high-performance web traffic routing.
Add to list
22 Lesons
49 minutes
On-Demand
Free-Video
nullcon

Don't Ruck Us Too Hard - Owning All of Ruckus AP Devices

0 rewiews
Explore vulnerabilities in Ruckus AP devices, including pre-authentication remote code execution exploits. Learn about research methods, discovered CVEs, and a framework for cross-architecture analysis.
Add to list
27 Lesons
42 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

The Insecurity of Cloudless Smart Door Systems

0 rewiews
Explore vulnerabilities in cloudless smart door systems for large buildings, focusing on IP-gateway security risks and potential exploits in intercom-IP integration.
Add to list
16 Lesons
53 minutes
On-Demand
Free-Video
Black Hat

Hardware Security Module - Executing Unsigned Code in HSM TEE

0 rewiews
Explore a novel attack on HSM digital signature verification, enabling execution of unsigned code in protected environments. Insights applicable to similar systems.
Add to list
21 Lesons
33 minutes
On-Demand
Free-Video
Black Hat

Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells

0 rewiews
Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
Black Hat

Commix - Detecting and Exploiting Command Injection Flaws

0 rewiews
Automated tool for detecting and exploiting command injection vulnerabilities in web applications. Covers various exploitation scenarios and reveals 0-day vulnerabilities across different platforms.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
Black Hat

Breaking BHAD - Abusing Belkin Home Automation Devices

0 rewiews
Exploración de vulnerabilidades en dispositivos de automatización del hogar Belkin WeMo, revelando fallas de seguridad y demostrando ataques potenciales en la infraestructura IoT.
Add to list
36 Lesons
48 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Attacking Industrial Remote Controllers

0 rewiews
Exploring vulnerabilities in industrial RF remote controllers, revealing security flaws and potential attacks. Includes demos, findings, and recommendations for improving safety in IIoT applications.
Add to list
1 Lesons
55 minutes
On-Demand
Free-Video

Understanding How Public Places Introduce Additional Risks to Business - Len Noe

0 rewiews
Explore public space cybersecurity risks for businesses, covering captive portals, QR codes, and physical attacks. Learn defensive strategies and awareness techniques.
Add to list
34 Lesons
49 minutes
On-Demand
Free-Video
Black Hat

Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells

0 rewiews
Explore critical vulnerabilities in network storage devices, their impact on data security, and implications for network infrastructure. Learn about attack methods and the importance of robust security measures.
Add to list
1 Lesons
52 minutes
On-Demand
Free-Video
Black Hat

Contemporary Automatic Program Analysis

0 rewiews
Explore automatic program analysis techniques for vulnerability discovery, from historical context to cutting-edge methods, with practical examples and demos for effective security research.
Add to list
29 Lesons
42 minutes
On-Demand
Free-Video
Black Hat

Practical Exploitation Using A Malicious Service Set Identifier - SSID

0 rewiews
Explore SSID exploitation techniques for wireless device attacks, including XSS, CSRF, and command injection. Learn about limitations, risk factors, and see live demonstrations of these methods.
Add to list
1 Lesons
1 hour
On-Demand
Free-Video

Practical Exploitation Using A Malicious Service Set Identifier - SSID - Deral Heiland

0 rewiews
Explore SSID exploitation techniques, including device limitations, cross-site scripting, and command injection. Learn practical methods for testing and exploiting vulnerabilities in wireless networks.
Add to list
25 Lesons
50 minutes
On-Demand
Free-Video

Scrutinizing WPA2 Password Generating Algorithms in Wireless Routers

0 rewiews
Scrutinizing WPA2 password generation algorithms in wireless routers, revealing vulnerabilities, backdoors, and security flaws in various router brands. Highlights methods for obtaining firmware and exploiting weaknesses.
Add to list
22 Lesons
23 minutes
On-Demand
Free-Video

Hacking Virtual Appliances

0 rewiews
Explore techniques for hacking virtual appliances, including command injection, filesystem analysis, and undocumented accounts. Learn about security vulnerabilities and vendor communication.
Add to list
25 Lesons
51 minutes
On-Demand
Free-Video
DEFCONConference

Inside Dash Cam Custom Protocols and Security Vulnerabilities

0 rewiews
Delve into comprehensive security analysis of network-connected dash cams, exploring vulnerabilities in boot processes, custom protocols, and configuration systems across multiple international manufacturers.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
DEFCONConference

Exploiting Security Vulnerabilities in Microhard Radio Equipment

0 rewiews
Uncover critical security vulnerabilities in Microhard's radio equipment, including command injections and buffer overflows, while exploring implications for SCADA and utility systems.
Add to list
1 Lesons
18 minutes
On-Demand
Free-Video
DEFCONConference

New Isn't Always Novel - Finding Basic Vulnerabilities in Enterprise Software

0 rewiews
Discover how basic vulnerabilities in enterprise software led to a successful Pwn2Own contest entry, featuring a command injection exploit in Lexmark printers and practical security insights.
Add to list
15 Lesons
37 minutes
On-Demand
Free-Video
DEFCONConference

Hacking Power Management in Data Centers - Security Vulnerabilities and Exploits

0 rewiews
Delve into data center power management security, exploring vulnerabilities in PDUs and DCIM systems while learning critical infrastructure protection strategies and attack vectors.
Add to list
13 Lesons
42 minutes
On-Demand
Free-Video