Examining DES-based Cipher Suite Support within the TLS Ecosystem
Explore DES-based cipher suite support in TLS, analyzing prevalence, geographical distribution, and implications for security. Learn why DES persists and how to remove it.
From Email Address to Phone Number - A New OSINT Approach
Explore innovative OSINT techniques to uncover phone numbers from email addresses, enhancing privacy and security investigations with cutting-edge methodologies and tools.
From EK to DEK - An Analysis of Modern Document Exploit Kits
Explore modern document exploit kits, their infection chains, and techniques. Gain insights into ThreadKit, VenomKit, and various exploitation methods used in malicious documents.
Serverless Infections - Malware Just Found a New Home
Explore serverless architecture vulnerabilities and learn how malware can exploit AWS Lambda functions, with insights on prevention and security best practices.
Turning - Page Tables - Bypassing Advanced Kernel Mitigations Using Page Tables Manipulations
Explore advanced kernel exploit techniques using page table manipulations to bypass Windows 10 mitigations. Learn virtualization-based security and memory management concepts.
Watch Out For That Bus! - Personal Disaster Recovery Planning
Practical strategies for personal disaster recovery planning, covering digital security, backups, financial preparedness, and ensuring loved ones can manage your affairs in emergencies.
The Current State of Adversarial Machine Learning
Explore adversarial machine learning's current landscape, including attack types, vulnerabilities, and defense strategies. Gain insights into visual understanding and notable research in this critical field.
Hackademia - The 2018 Literature Review
Explore cutting-edge cybersecurity research, from USB vulnerabilities to compiler techniques, with insights on emerging trends like citizen developers and domestic violence apps.
Bypassing Antivirus Engines Using Open Sourced Malleable C2 Software, MSFVenom, Powershell and a Bit of Guile
Learn techniques to bypass antivirus using open source tools like Malleable C2, MSFVenom, and PowerShell. Explore examples and scripts for more effective penetration testing and security assessments.
Disabling Encryption to Access Confidential Data
Explore techniques for disabling encryption to access confidential data, including man-in-the-middle attacks, AWS vulnerabilities, and TLS exploits. Learn practical methods and necessary tools for intercepting encrypted communications.
What is Agile and How Can I Use it Well?
Learn Agile methodology principles, implementation strategies, and best practices for effective team management and project delivery in this concise, practical guide.
Community Career Panel or How to Get More than a T-Shirt Working at a Con
Explore career opportunities in cybersecurity events through expert insights on volunteering, networking, and professional growth. Gain valuable tips for resume building and conference management.
Security and DevOps Are Really Best Friends
Explore the synergy between security and DevOps, focusing on asset management, automation, and best practices for enhanced cybersecurity in modern IT environments.
Abusing Password Reuse at Scale - Bcrypt and Beyond
Explore advanced techniques for exploiting password reuse vulnerabilities, focusing on bcrypt and other hashing methods to enhance cybersecurity knowledge and ethical hacking skills.
Securing Robots at Scale
Explore robot security challenges, attack surfaces, and protection strategies for hardware, software, and user privacy in the era of widespread robotic adoption.
How I Met Your Password
Explore advanced password cracking techniques, from leveraging leaks to using Markov chains and attacking phrases in multiple languages. Learn cutting-edge methods for WPA2 and heavy-duty algorithms.
Tuning The Warp Drive with Laforge - New Tool for Building Security Competitions
Explore a new tool for creating resilient security competition infrastructures, addressing challenges in competition networks and offering innovative solutions for organizers.
Building Ambassadors to Reduce Friction, Drive Change, and Get Sh*t Done
Discover strategies for building effective ambassadors to drive change, reduce friction, and improve organizational efficiency in cybersecurity and beyond.
Security Awareness Training Refresh
Refresh your security awareness with practical tips on password management, phishing prevention, and role-based training. Learn to engage users effectively and create impactful, tailored security programs.
Cyber Safety Disclosure
Explore cyber safety disclosure with experts, covering medical device security, vulnerability equities, and government initiatives. Gain insights into critical cybersecurity challenges and solutions.
Vulnerability Management 101 - Practical Experience and Recommendations
Practical insights on vulnerability management, covering discovery, scoring, and risk acceptance plans, with recommendations for effective implementation in various organizational contexts.