Attack Scenarios Abusing Azure Active Directory
Explore Azure AD security vulnerabilities, privilege escalation techniques, and mitigation strategies. Learn to protect your organization's cloud infrastructure from potential attacks and misconfigurations.
Container Escape in 2021
Explore new methods for escaping privileged runc containers, focusing on cloud security vulnerabilities and innovative exploit techniques in container environments.
Scaling Up Offensive Pipelines
Innovative approach to offensive CI/CD pipelines for red and purple team operations, automating weaponization and evasion techniques using Infrastructure as Code and Kubernetes.
Pacu - Attack and Post-Exploitation in AWS
Explore AWS attack and post-exploitation techniques using Pacu, an open-source tool for penetration testing and security assessments in cloud environments.
All Your Cloud Are Belong To Us - Hunting Compromise in Azure
Explore techniques for detecting and investigating compromises in Azure cloud environments, focusing on security best practices and threat hunting strategies.
Give the Dog a Bone - Exploring OSINT Capabilities of Pen-testing Tools
Explore OSINT capabilities of pen-testing tools, focusing on security awareness, cloud migration, and new attack strategies. Learn about DNS, AWS logs, Nmap, and honeypots.
Secure Your AWS Accounts Without Breaking the Bank
Learn cost-effective strategies to enhance AWS account security, covering essential practices and tools for robust protection without excessive spending.
GCP BigQuery as Security Detection Platform
Explore using BigQuery for security detection, leveraging its powerful data analysis capabilities to enhance threat detection and response in cloud environments.
Understanding, Abusing and Monitoring AWS AppStream 2.0
Explore AWS AppStream 2.0's functionalities, potential vulnerabilities, and effective monitoring strategies for enhanced cloud security and application streaming management.
I'm a Little Bit - FedRAMP - Country, I'm a Little Bit SOC2 'n Roll
Explore the intersection of FedRAMP and SOC2 compliance frameworks, comparing their requirements, implementation challenges, and best practices for organizations seeking certification.
The Northern Virginia Shuffle - Lateral Movement and Other Creative Steps Attackers Take in AWS Cloud Environments and How to Detect Them
Explore lateral movement techniques and creative attack strategies in AWS environments, along with effective detection methods for enhanced cloud security.
Manage Your Attack Surface on a Budget
Discover cost-effective strategies for managing your attack surface, exploring internal challenges, homegrown solutions, and IoT considerations. Learn about Scout and its applications in cybersecurity.
Practical Security in the Brave New Kubernetes World
Explore Kubernetes security vulnerabilities through hands-on recon and exploitation of clusters, sidecars, and supporting infrastructure. Learn practical techniques for compromising and persisting in real-world K8s environments.
From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes
Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.
Cloud Configure Review - The New Internal Pentest at DefCamp
Explore cloud configuration review as a modern internal penetration testing approach, focusing on its importance, methodologies, and impact on cybersecurity strategies.
Secure Them All - From Silicon to the Cloud
Explorez les dernières avancées en sécurité informatique, du silicium au cloud, présentées lors de la conférence DefCamp 2019, l'événement majeur en cybersécurité d'Europe centrale et orientale.
Security and Compliance in the Cloud
Explorez les défis et solutions de sécurité et conformité dans le cloud lors de cette conférence DefCamp, abordant les dernières pratiques et recherches en matière de cybersécurité.
Breaking Formation - From an Error Message to Internal AWS Infrastructure
Explore a critical AWS CloudFormation vulnerability, its impact on cloud security, and the disclosure process. Gain insights into cloud infrastructure vulnerabilities and future research directions.
Defending Enterprise Cloud Infrastructure - A Hacker's Perspective
Explore cloud infrastructure security from a hacker's perspective. Learn overlooked attack vectors, defense mechanisms, and critical baseline practices to protect enterprise cloud environments at scale.
Securing Microservices at API Gateway Using Cloud Native Solutions
Learn to secure microservices using cloud-native solutions at the API gateway level. Explore authorization techniques, Open Policy Agent integration, and best practices for robust microservice security.
Cloud as an Attack Vector
Explore how cybercriminals exploit cloud services as attack vectors, including shadow IT risks and malware delivery. Learn about emerging threats and security implications in the rapidly evolving cloud landscape.