Sleeping With One AI Open - An Introduction to Attacks Against Artificial Intelligence and Machine Learning
Explore vulnerabilities in AI systems and learn about various attacks on machine learning algorithms, their potential impacts, and the importance of AI security awareness.
Growing Your Skillset with Capture the Flag
Strategies for maximizing learning in Capture the Flag competitions, including tips for beginners and insights from an organizer's perspective on tackling new topics effectively.
HALT AND CATCH FIRE - Social Engineering CTFs for Fun to a Job as a Professional Red Team Social Engineer
Explore the transition from social engineering competitions to professional red team engagements, examining the differences in tactics, strategies, and real-world applications.
Security Compliance as Code
Explore how to transform security compliance frameworks into code, streamlining processes and reducing burden on engineering teams while maintaining industry standards and customer trust.
Career Village - Tales from a Hiring Manager
Gain valuable insights on interviewing dos and don'ts from an experienced hiring manager's perspective, enhancing your chances of success in the job market.
HSMs in Plain Envelopes - A Code Signing Story
Explore the challenges of code signing for open source developers, addressing outdated mechanisms and high costs while examining the complexities and frustrations involved in the process.
Security Hiring Trends
Explore current security hiring trends, including top-paying industries, in-demand skills, and strategies for landing interviews and securing job offers in the evolving tech landscape.
Hunting Supply Chain Threats Using Anomaly Detection
Explore a case study on detecting supply chain threats through anomaly detection in Cloud API logs, offering insights into advanced cybersecurity techniques.
How Do You Trust Your Open Source Software?
Explore OpenSSF Scorecard, an automated tool assessing software security heuristics. Learn how it evaluates dependencies and identifies areas for improving security posture in open source projects.
I Hope This Sticks - Analyzing ClipboardEvent Listeners for XSS
Explore ClipboardEvent listeners as potential XSS vectors in web applications. Learn techniques for identifying and exploiting vulnerabilities to enhance your offensive security skills.
Story of an RCE on Apple Through Hot Jar Swapping
Discover how Frans Rosen achieved remote code execution on Apple through hot jar swapping. Learn about the research, exploit, and analysis behind this impressive security finding.
Reversing Web Assembly
Explore techniques for reversing Web Assembly (wasm) in this offensive security talk. Learn key strategies and tools for analyzing and understanding wasm code.
Blackbox Monitoring for Timely Bug Detection
Discover effective blackbox monitoring techniques for timely bug detection in web applications. Learn task-based hybrid approaches, freshness indicators, and risk markers for improved security.
A Heaven for Hackers - Breaking Web Security Virtual Appliance
Explore web security vulnerabilities and hacking techniques through hands-on demonstrations, focusing on methodology, enumeration, and exploitation of common weaknesses in web applications.
Practical Attacks Using HTTP Request Smuggling
Explore practical HTTP request smuggling attacks, including CL.TE/TE.CL desync techniques, testing methods, and real-world examples. Learn to exploit vulnerabilities for session stealing and response queue poisoning.
Who, What, Where, When, Wordlist
Explore techniques for creating and utilizing effective wordlists in cybersecurity, including target-specific lists, data processing, and practical applications for bug hunting.
The Act of Balancing
Explore strategies for maintaining work-life balance, preventing burnout, and enhancing self-awareness in the cybersecurity field. Learn practical tips for managing stress and improving productivity.
The Pwning Machine - An Easy to Setup Pwning Station
Explore the Pwning Machine, an easy-to-setup hacking environment. Learn about its features, including a basic server, markdown editor, and pipeline runner for efficient cybersecurity tasks.
Owning Online Games with Only Web Hacking Experience
Explore web hacking techniques to exploit online games, leveraging existing web security knowledge for game vulnerabilities. Gain insights into adapting skills for game security testing.
How to Use Amass Efficiently
Comprehensive guide on maximizing Amass tool for efficient information gathering and reconnaissance in cybersecurity, presented by expert Jeff Foley at NahamCon2020.
Scaling Up - Automated Attack Surface Discovery with Intrigue Core
Explore automated attack surface discovery using Intrigue Core for efficient cybersecurity scaling. Learn techniques to identify vulnerabilities and enhance your security posture.