Pass the Hash Techniques for Advanced Network Penetration - Lecture 10
Learn advanced techniques for Pass the Hash attacks, enhancing your penetration testing skills and understanding of network security vulnerabilities.
Anatomy of Account Takeover - Understanding Threats and Defenses
Explore account takeover threats, defense strategies, and challenges in identity protection. Learn about risk detection, login challenges, and the evolving landscape of online security.
The Dark Side of EDR - Repurposing EDR as an Offensive Tool
Explore innovative attack vector transforming EDR into stealthy malware. Learn to bypass security features, exfiltrate data, and establish persistent control, focusing on Palo Alto Networks Cortex XDR.
Protecting Against Credential and Token Theft
Explore credential and token theft protection strategies, including authentication strengths, token binding, and continuous access evaluation for enhanced security in digital environments.
Cloak and Dagger - From Two Permissions to Complete Control of the UI Feedback Loop
Uncovers Android security flaws allowing malicious apps to control UI feedback loop, enabling stealthy attacks like credential theft and unauthorized app installations without user awareness.
Every Breath You Take - A CTI Review of Stalkerware
Explore stalkerware as an emerging enterprise threat, its poor detection, and potential for data breaches. Learn reverse engineering of Android APKs and OSINT techniques for stalkerware hunting.
What We Can Learn from Google's Fight with Phishing
Insights from Google's research on phishing attacks, including prevalence, impact, and effective mitigation strategies. Explores prevention methods and provides customized recommendations for different user environments.
Hacking Exposed - Real-World Tradecraft of Bears, Pandas and Kittens
Explore real-world hacking techniques used by nation-state actors, including initial infection, privilege escalation, credential theft, persistence, and exfiltration. Learn mitigation strategies from high-profile case studies.
Beyond Takeover - Attacker's In. Now What?
Explore the aftermath of phishing attacks through a unique research perspective, uncovering attacker behaviors, account takeover dynamics, and essential cybersecurity insights for organizations.
Critical Infrastructure Network Attacks - Code Red, Alert Network Operators
Analyze new tactics used by cybercriminals targeting critical infrastructure with multistage ransomware attacks, focusing on electric transmission substation vulnerabilities and incident timelines.
Post-Exploitation of Cloud Service Providers
Explore AWS post-exploitation techniques, including cloud-wide credential theft and backdooring compromised accounts, to enhance penetration testing skills for cloud environments.
How to Hunt for Lateral Movement on Your Network
Learn techniques to detect and analyze lateral movement in network security, covering reconnaissance, privilege escalation, and credential theft, with practical datasets for effective monitoring.
Early Detection through Deception
Explore early threat detection through deception techniques, including examples of network intrusion, system compromise, and phishing prevention strategies.
TeamTNT - Explosive Cryptomining
Explore TeamTNT's cryptojacking tactics targeting Linux servers, including their attack methods, credential theft, and evolution from Docker instances to Windows systems.
Certified Pre-Owned - Abusing Active Directory Certificate Services
Explore AD CS vulnerabilities for credential theft, persistence, and domain escalation. Learn offensive and defensive techniques to secure Active Directory PKI implementations.
Continuous Intrusion - Why CI Tools Are An Attacker's Best Friends
Explore how CI tools can be exploited for attacks, including command execution, credential theft, and privilege escalation, with live demonstrations on popular open-source and proprietary platforms.
Crippling HTTPS with Unholy PAC
Explore how malicious Proxy AutoConfiguration can compromise HTTPS security, leak sensitive data, and enable cross-platform attacks, even on secure networks and browsers.
Phishing - Going From Recon to Credentials
Learn effective phishing techniques, from reconnaissance to credential harvesting. Explore tools, automation, and the Speed Fishing Framework in this comprehensive overview.
Introducing Pi-Key - Hacking Just Like the Movies
Discover Pi-Key: a £20 Raspberry Pi Zero device that steals Windows credentials, cracks them, and unlocks machines in under 60 seconds. Learn how it works, its components, and build your own.
AutoSpill - Zero Effort Credential Stealing from Mobile Password Managers
Unveiling a novel attack on Android password managers, exploiting autofill vulnerabilities to steal credentials without user interaction. Discusses impact, root causes, and proposes countermeasures.
Break Me - Credential Assessment Mapping Privilege Escalation at Scale - Matt Weeks
Explore credential assessment, mapping, and privilege escalation techniques for enhanced cybersecurity. Learn from major breaches and industry responses to improve defensive strategies.