Android App Penetration Testing 101
Learn Android app penetration testing essentials, including tools, methodologies, and practical techniques for identifying vulnerabilities and securing mobile applications.
A Journey of Payload Delivery
Explore innovative payload delivery techniques, focusing on evasion, encryption, and minimizing attribution. Learn about Firefox Send, Web Crypto API, and weaponizing file-sharing services.
Offensive Browser Extension Development
Learn to develop and analyze browser extensions, exploring potential security risks and malicious behaviors in web store submissions and installations.
Peeling the Onion's User Experience Layer - Examining Naturalistic Use of the Tor Browser
Explores user experience challenges of Tor Browser, analyzing non-expert interactions to identify usability issues and improve adoption of anonymity systems. Insights for enhancing privacy-focused web browsing.
DeepCorr - Strong Flow Correlation Attacks on Tor Using Deep Learning
Learn about DeepCorr, a machine learning approach to enhance flow correlation attacks on Tor, exploring its architecture, effectiveness, and potential countermeasures.
Unearthing Malicious and Risky OpenSource Packages Using Packj
Explore PACKJ, a security framework for detecting risky open-source packages. Learn about supply chain attacks, defense strategies, and real-world examples to enhance your software security practices.
Pushing Security Left by Mutating Byte Code
Explore techniques for building secure software through bytecode mutation, including obfuscation, encryption, and cross-compilation to protect against reverse engineering and enhance product security.
The Faces of MacOS Malware - Detecting Anomalies in a Poisoned Apple
Explore macOS malware detection techniques, built-in utilities exploited by threat actors, and strategies to identify suspicious activity on Apple systems in this comprehensive security analysis.
Contextomy - Let's Debug Together
Explore a critical iOS design flaw allowing remote code execution through debug session hijacking. Learn about the vulnerability's discovery, research, exploitation, and Apple's fix.
Mind The Gap - The Linux Ecosystem Kernel Patch Gap
Explore Linux kernel patching challenges, ecosystem fragmentation, and automated solutions. Learn about tools for assessing patch completeness and improving security in Linux devices and distributions.
A UEFI Firmware Bootkit in the Wild
Explore the inner workings and mysterious history of CosmicStrand, a sophisticated UEFI firmware bootkit that provides deep persistence on select motherboards, evading detection and surviving OS reinstallations.
Bheem OS - A Next-Gen Reasonably Secure OS
Explore Bheem OS, a next-gen secure operating system that isolates apps in MicroVMs, offering enhanced security, usability, and performance. Learn about its architecture, features, and advantages over traditional systems.
Introduction to the OWASP ModSecurity Core Rule Set
Learn about OWASP ModSecurity Core Rule Set, a powerful open-source web application firewall. Discover key features like paranoia levels and anomaly scoring, and see its effectiveness in protecting against various attacks.
Jailbreaking the AppleTV3 - Tales From A Full Stack Hack
Explore the full stack hack of AppleTV3, uncovering vulnerabilities and jailbreaking techniques. Learn tricks for attacking restricted devices and gain insights into iOS security.
Hunting Evasive Vulnerabilities - Finding Flaws That Others Miss
Explore techniques for uncovering elusive web vulnerabilities, from advanced methods to overlooked basics. Learn strategies to enhance your security auditing skills and find flaws others miss.
What is Cyber Threat Intelligence
Discover cyber threat intelligence essentials, including analyst skills, frameworks, daily tasks, and maintaining anonymity. Learn to put intelligence into action for effective cybersecurity.
macOS Security Features Bypasses by Example
Explore macOS security features, vulnerabilities, and bypass techniques with a Microsoft security expert. Gain insights into SIP, TCC, and potential exploit avenues for researchers and professionals.
A Presentation or Presentations Because Presenting
Enhance your presentation skills with strategies from Top Gun and the Army, including effective storytelling techniques and practical tips for impactful delivery.
Retail Store POS Penetration Testing
Explore POS system vulnerabilities, security controls, and network testing techniques for retail environments. Learn effective recommendations to enhance POS security.
An ACE in the Hole - Stealthy Host Persistence via Security Descriptors
Explore stealthy host persistence techniques using security descriptors, focusing on offensive implications, methodologies, and case studies for various Windows objects and services.
Defending against PowerShell Attacks
Learn defensive strategies against PowerShell attacks, exploring security measures, logging techniques, and best practices to protect systems from malicious PowerShell usage.