Evading Microsoft ATA for Active Directory Domination
Explore techniques to bypass Microsoft ATA's threat detection in Active Directory, covering reconnaissance, credential attacks, lateral movement, and persistence methods.
Securing the Next Version of HTTP - How QUIC and HTTP-3 Compare to HTTP-2
Explore QUIC and HTTP/3 protocols, their security features, and improvements over HTTP/2. Learn about encryption, handshakes, and performance enhancements in next-gen web communication.
Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices
Discover critical Wi-Fi security vulnerabilities affecting billions of devices, including Amazon Echo. Learn about Kr00k, its impact, and see a live demonstration of the exploit.
IMP4GT - IMPersonation Attacks in 4G Networks
Explore IMP4GT attacks in 4G networks, revealing vulnerabilities in LTE security. Learn about impersonation techniques, their impact, and consequences for users and law enforcement.
Needing the DoH - The Ongoing Encryption and Centralization of DNS
Explore DNS encryption's impact on internet privacy, security, and network operations. Delve into DoT and DoH standards, their implications for users and providers, and the shift towards centralized DNS.
See Like a Bat - Using Echo-Analysis to Detect Man-in-the-Middle Attacks in LANs
Explore Vesper, a novel MitM detector for LANs using echo-analysis. Learn about its application, effectiveness against various attacks, and practical deployment strategies.
WiFi-Based IMSI Catcher
Explore new WiFi-based IMSI catcher techniques for tracking mobile devices, exploiting authentication protocols and discussing potential mitigations for operators and users.
Command Injection in F5 iRules
Explore command injection vulnerabilities in F5 iRules, focusing on syntax, exploitation techniques, and security implications for BigIP F5 products used in high-performance web traffic routing.
Adventures in Attacking Wind Farm Control Networks
Explore vulnerabilities in wind farm control networks and potential attack scenarios, with insights on securing these critical renewable energy infrastructures.
The Crash Course - A Non-Programmer's Guide to Fuzzing
Hands-on workshop for non-programmers to learn fuzzing techniques. Covers environment setup, tools like AFL and Honggfuzz, instrumentation, input selection, and crash analysis. Suitable for beginners to intermediate level.
Mobile Self Defence
Explore mobile network vulnerabilities and learn self-defense strategies using SnoopSnitch, an Android app that detects common attacks like IMSI catchers and SIM exploits.
Fuzzing the Easy Way Using Zulu
Explore fuzzing binary protocols with Zulu, a GUI-based tool for easy capture, mutation, and replay. Learn its features and successful bug-finding applications.
Building a Cyber Training Range on a Budget
Aprenda a construir um ambiente de treinamento cibernético econômico, abordando hardware, sistemas operacionais, redes, ferramentas e técnicas para simular cenários realistas de segurança.
Intro to Wireshark
Learn essential network analysis skills with WireShark, covering packet capture, TCP Dump, and wireless card capture for effective network monitoring and troubleshooting.
Return From The Underworld - The Future Of Red Team Kerberos
Explore Kerberos authentication, its vulnerabilities, and future developments in red team security through practical demonstrations and in-depth analysis.
Confessions of an IT OT Marriage Counselor
Explore challenges, threats, and misconceptions in industrial control systems with insights on bridging IT and OT for enhanced cybersecurity in critical infrastructure.
Enterprise Security Monitoring - Seeing Clearly with Security Onion - Wes Lambert
Learn to implement enterprise-level security monitoring using Security Onion, covering tools, data types, interfaces, and deployment strategies for effective threat detection and analysis.
Peeling the Onion's User Experience Layer - Examining Naturalistic Use of the Tor Browser
Explores user experience challenges of Tor Browser, analyzing non-expert interactions to identify usability issues and improve adoption of anonymity systems. Insights for enhancing privacy-focused web browsing.
DeepCorr - Strong Flow Correlation Attacks on Tor Using Deep Learning
Learn about DeepCorr, a machine learning approach to enhance flow correlation attacks on Tor, exploring its architecture, effectiveness, and potential countermeasures.
VLAN Hopping, ARP Poisoning, and Man In The Middle Attacks in Virtualized Environments
Explore VLAN hopping, ARP poisoning, and man-in-the-middle attacks in virtual environments. Learn about test scenarios, hardware specs, and mitigation techniques for network security professionals.
Network Manipulation on Video Games
Network manipulation techniques for video games, covering latency, protocols, input prediction, and privacy, with practical tips for optimizing gameplay and understanding network traffic.