Alexa, Hack My Serverless Please
Explore serverless security risks, focusing on event injection attacks across various platforms. Learn to identify and mitigate vulnerabilities in cloud-based applications.
Evading Microsoft ATA for Active Directory Domination
Explore techniques to bypass Microsoft ATA's threat detection in Active Directory, covering reconnaissance, credential attacks, lateral movement, and persistence methods.
My Cloud is APT's Cloud - Investigating and Defending Office 365
Investigate and defend Office 365 against sophisticated attacks. Learn authentication types, attack lifecycle, and effective countermeasures for cloud-based enterprise security.
Office in Wonderland
Explore novel techniques abusing Microsoft Office features for offensive purposes, including new vulnerabilities, attack vectors, and security impacts of the suite's architectural design.
Denial of Service with a Fistful of Packets - Exploiting Algorithmic Complexity Vulnerabilities
Explore algorithmic complexity vulnerabilities in web servers, their impacts, and mitigation strategies. Learn how small inputs can cause significant disruptions and how to protect against these attacks.
Modern Evasion Techniques
Explore modern evasion techniques for cybersecurity, including Metasploit tips, email controls, Apache ModRewrite, and PowerShell, with practical demonstrations and expert insights.
Malicious Documents Emerging Trends - A Gmail Perspective
Comprehensive analysis of malicious document trends targeting Gmail users, exploring attacker tactics and Google's defensive strategies using AI detection and traditional antivirus methods.
Owning MS Outlook with PowerShell
Master PowerShell for Outlook: data mining, Exchange rules, persistence techniques, and dynamic triggers. Enhance productivity and automate tasks with advanced scripting.
Owning MS Outlook with Powershell
Explore PowerShell automation for MS Outlook: data mining, email management, and security implications. Learn to create powerful scripts for enhanced productivity and potential risks.
How Your Company Can Help Sustain Open Source
Explore strategies for corporate open source support, including funding initiatives, OSPOs, employee contributions, and measuring impact. Gain practical ideas to promote sustainability.
BECs and Beyond - Investigating and Defending Office 365
Explore Office 365 security through real-world attack case studies. Learn investigation techniques, log analysis, and defense strategies to protect cloud-based enterprise environments.
Building a Path to the Future - Mentoring New SREs
Strategies for effective mentorship in SRE, focusing on remote work challenges and the importance of guiding principles, documentation, and sponsorship for career growth.
Cloudy with a Chance of APT - Novel Microsoft 365 Attacks in the Wild
Explore novel APT techniques targeting Microsoft 365, including persistent access methods and data extraction. Learn technical details, potential extensions, and prepare for emerging threats.
Faster, Wider, Greater - Modern Pentest Tricks
Explore modern pentesting techniques, tools, and procedures for efficient data processing and analysis. Learn about Jython, PyInstaller, CSVKit, Impacket, Frida, and GNU Parallel to enhance your security auditing skills.
Get to the Money - Hacking PoS and PoP Systems
Exploración detallada de vulnerabilidades en sistemas de punto de venta, demostrando vectores de ataque y discutiendo la seguridad de sistemas POS modernos, con énfasis en SAP POS.
Kernel Exploit Hunting and Mitigation
Explore kernel exploit hunting and mitigation techniques, focusing on identifying and analyzing malware that leverages Windows kernel vulnerabilities for system compromise and evasion of security measures.
Undocumented MS Word Features Abused by Attackers
Explore undocumented MS Word features exploited by attackers, focusing on remote picture links and their potential for profiling activities. Learn detection methods and threat actor insights.
Persisting with Microsoft Office - Abusing Extensibility Options
Explore techniques for exploiting Microsoft Office add-ins to achieve persistence on compromised systems. Learn advantages, deployment complexity, and detection methods for various mechanisms.
Vendors, and Risk, and Tigers, and Bears, Oh My - How to Create a Vendor Review Process From the Ground Up
Learn to create a vendor review management process from scratch using simple tools like email and Google Forms, without expensive software or large teams.
Working with Webhooks
Explore webhooks: their uses, design, and implementation. Learn to create, receive, and process webhooks for seamless system integration and data exchange in modern applications.
BadTunnel - How Do I Get Big Brother Power?
Discover a critical Windows flaw affecting multiple systems and applications. Learn about its wide-ranging impact and how to defend against this pervasive threat, even on unsupported systems.