Living off Microsoft Copilot - Exploiting AI for Red Team Operations
Explore how Microsoft Copilot can be exploited for covert data theft, exfiltration, and AI-based social engineering. Learn about LOLCopilot tool and recommended protective measures against Copilot abuse.
Bypassing Endpoint Controls Using Office Macros - Techniques and Defenses
Explore techniques for bypassing endpoint controls using Office macros, including crafting malicious documents, establishing C&C channels, and evading detection through advanced attack methods.
Learn Offensive JavaScript Today
Discover offensive JavaScript techniques including keylogging, data exfiltration, password theft, and CSRF bypass in this concise tutorial on exploiting web vulnerabilities.
Threat Hunting in the O365 Ecosystem - David Stubley, 7Elements
Explore threat hunting techniques in Office 365, focusing on audit logs, login patterns, and data exfiltration. Learn from a real-world compromise case study.
Naisho DeNusumu: Stealing Secretly - Exfiltration Tool Framework
Explore a covert exfiltration tool framework designed for stealthy data extraction, offering insights into advanced cybersecurity techniques and countermeasures.
We Hacked the Gibson, Now What? - Cybersecurity Implications and Next Steps
Explore post-exploitation techniques and strategies for maintaining access after successfully breaching a system, with insights on evading detection and maximizing impact.
Mirror Mirror - Reflected PDF Attacks Using SQL Injection
Explore innovative techniques for exploiting SQL injection vulnerabilities to launch reflected PDF attacks, enhancing your understanding of web application security.
Testing Enterprise DLP Systems - Advanced Data Exfiltration Techniques
Explore advanced data exfiltration techniques and learn how to test enterprise DLP systems effectively, enhancing your cybersecurity skills and knowledge.
The Rise of SaaS-Targeted Malware - Zeus Variant Attacking Salesforce Users
Demonstration of a new Zeus malware variant targeting Salesforce users, showcasing its stealthy data exfiltration capabilities and discussing implications for SaaS security.
Quick Data Exfiltration Exercise with Security Onion
Hands-on exercise using Security Onion to analyze data exfiltration in a PCAP file. Learn to detect and investigate network security threats with practical tools and techniques.
Google Workspace Forensics - Insights from Real-World Hunts and Incident Response
Insights on threat hunting and incident response in Google Workspace, focusing on data exfiltration from Google Drive. Learn forensic investigation techniques for GWS logs from real-world cases.
Injecting Brains Into Blind SQL Injection - Optimizing Data Exfiltration
Innovative approach to optimize Blind SQL Injection using Machine Learning and statistics. Introduces Hakuin, a tool that significantly improves exfiltration speed for database schemas and content compared to standard methods.
Emerging Threats in Cybersecurity: Post-Motown Analysis - BSides Detroit 2016
Explore emerging cyber threats, detection challenges, and innovative attack techniques. Learn about Angler exploit kit, ransomware trends, and data exfiltration methods in this cybersecurity deep dive.
Chinese APT - Exploiting Edge Devices for Surveillance and Attacks
Revelación de ataques de APT chinos a dispositivos de borde, incluyendo un 0-day en routers de vigilancia. Se analizan casos de estudio y se proponen estrategias de mitigación.
One Port to Serve Them All - Google GCP Cloud Shell Abuse
Uncovers security vulnerabilities in GCP Cloud Shell, demonstrating how attackers can exploit a public-facing port to access internal services and bypass authentication, potentially leading to data leaks and network attacks.
Secure IoT Command, Control, and Exfiltration Using Apache NiFi and Apache MiNiFi
Explore secure IoT data collection and control using Apache NiFi and MiNiFi. Learn to prioritize, analyze, and encrypt data at the edge while ensuring compliance with local governance policies.
Infrastructure as Remote Code Execution: How to Abuse Terraform to Elevate Access
Explore security risks in Terraform, including privilege escalation and data exfiltration. Live demos showcase attack scenarios and provide recommendations for securing implementations.
Secure IoT Command, Control, and Exfiltration with Apache MiNiFi
Explore Apache MiNiFi for secure IoT data collection, prioritization, and analysis at the edge. Learn about encryption, governance, and centralized control using Apache NiFi for enhanced IoT security.
Every Breath You Take - A CTI Review of Stalkerware
Explore stalkerware as an emerging enterprise threat, its poor detection, and potential for data breaches. Learn reverse engineering of Android APKs and OSINT techniques for stalkerware hunting.
Tu Propia Emisora de Números Espía - Radio Space
Explora la creación de emisoras de números y técnicas de exfiltración de datos con Simon Roses Femerling, experto en ciberseguridad y fundador de VULNEX. Descubre los secretos de las comunicaciones encubiertas.
Inter VM Data Exfiltration - The Art of Cache Timing Covert Channel on x86 Multi-Core
Explore cache timing covert channels in x86 multi-core systems, learning techniques for inter-VM data exfiltration and reverse shell establishment using shared resources and architecture imperfections.