Hacking on Bug Bounties for Five Years
Discover the evolution of bug bounty hunting over five years, exploring successful techniques, favorite vulnerabilities, and lessons learned to help you replicate success in ethical hacking.
Leveraging Bug Bounties for Your Career
Discover how bug bounty hunting can boost your cybersecurity career. Expert hackers share insights on skill development, networking, and leveraging experiences for future opportunities.
Hack Like a Pro - Bug Bounties, Web Vulnerabilities & More
Explore ethical hacking, bug bounties, web vulnerabilities, and API security. Learn how to start in cybersecurity, understand ethical boundaries, and get tips for password management and bug hunting.
The Internet of Us
Explore the evolving landscape of IoT security, challenging industry norms and emphasizing the need for new approaches to protect businesses and consumers in the interconnected world.
Digging for IE11 Sandbox Escapes Part 1
Explore IE11 sandbox vulnerabilities, focusing on logic bugs and Enhanced Protected Mode. Learn techniques to investigate, analyze, and exploit sandbox weaknesses in Windows 8.1.
Digging for IE11 Sandbox Escapes Part 2
Explore IE11 sandbox vulnerabilities, focusing on logic bugs and Enhanced Protected Mode. Learn to investigate, analyze, and exploit sandbox escapes discovered during a bug bounty program.
Hack Like a Pro - Bug Bounties, Web Vulnerabilities & More
Explore ethical hacking, bug bounties, and cybersecurity with experts. Learn practical tips, essential skills, and valuable resources to enhance your hacking prowess and protect digital assets.
Everybody Gets Clickjacked - Hard Knock Lessons on Bug Bounties
Explore hard-knock lessons on bug bounties and clickjacking vulnerabilities, gaining insights into web security challenges and effective mitigation strategies.
Securing Our Ethics - Ethics and Privacy in a Target Rich Environment
Explore ethical challenges in cybersecurity, including privacy concerns, certifications, and bug bounties. Learn to navigate complex ethical dilemmas in a rapidly evolving field.
Back to the Future - Understanding Our Future by Following the Past
Explore hacker ethics, bug bounties, and cybersecurity standards in this talk on understanding our digital future by examining the past and present of hacking culture.
Hey I Found a Vulnerability - Now What
Explore the process of responsible vulnerability disclosure, from discovery to coordinated vendor communication, with insights on effective reporting and ethical considerations.
The Escape Map - Pivoting to a New Life of InfoSec
Discover how to transition into the InfoSec field, exploring career paths, learning methods, and practical steps to build expertise and seize opportunities in cybersecurity.
Free Web App Pentesting Tools and Resources
Discover essential free tools and resources to enhance your web app pentesting and bug bounty skills. Learn about Caido, Burp Suite, browser plugins, and hands-on learning platforms.
Realistic Web CTF Walkthrough - JWT, API Hacking, SSRF, and SQLi
Walkthrough of NahamCon2024 Mission showcasing JWT tricks, API hacking, SSRF, and SQLi. Learn advanced web security techniques and bug bounty strategies from an experienced hacker.
Exploring a New Class of Kernel Exploit Primitive
Uncover innovative kernel exploit techniques using limited primitives, focusing on turning seemingly benign bugs into powerful attack vectors for code execution and privilege escalation.
Bug Bounty Recon: Bypassing Geographic DNS with Ensemble
Discover how Ensemble revolutionizes bug bounty hunting by bypassing GeoDNS limitations, enabling comprehensive scanning across multiple geographic regions through a distributed cluster of nodes and user-friendly web interface.
Building Scalable Reconnaissance Systems with AWS Serverless Architecture
Discover how to build a scalable, cost-effective reconnaissance framework using AWS serverless architecture for cybersecurity and bug bounty hunting, featuring automated workflows and efficient resource management.
Hacking War Stories: From Prison Systems to Tech Companies - A Series of Unfortunate Events
Dive into real-world hacking adventures, from prison systems to major tech companies, exploring identification, exploitation techniques, and potential impact across different organizational contexts.
Growing the Community of AI Hackers with Generative Red Team Testing
Dive into the groundbreaking world of AI security testing, exploring red team methodologies, algorithmic bounties, and practical strategies for evaluating Large Language Models beyond basic exploits.
Grand Theft Actions - Abusing Self-Hosted GitHub Runners for Supply Chain Attacks
Dive into critical security vulnerabilities in GitHub Actions, exploring real-world attacks on self-hosted runners and learning how to prevent supply chain compromises in major open-source projects.
Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana
Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.