Subdomain Tracking Basics with Notify
Learn efficient subdomain tracking techniques using Notify for enhanced cybersecurity and bug bounty hunting.
How to Hack OAuth: Real-World Attacks and Prevention Strategies
Explore real-world OAuth hacks affecting major providers, learn attack details and prevention strategies. Gain insights into technical flaws and human vulnerabilities in modern online security.
Build a Beautiful CRUD App Using Spring Boot and Angular
Learn to create a secure CRUD application using Spring Boot and Angular, integrating Auth0 for authentication and Cypress for testing. Gain hands-on experience in building modern, full-stack web applications.
Testing GUI Apps - What to Test and How to Test It - Mini Coding Course for Beginners
Learn automated software testing with a hands-on Kivy GUI project. Covers static and dynamic analysis, unit testing, and various test scenarios to improve code quality and reliability.
My Terrible Roommates - Discovering the FlowFixation Vulnerability and the Risks of Sharing a Cloud Domain
Unveiling FlowFixation: High-severity cloud vulnerability affecting shared domains. Explore risks, prevention methods, and the importance of the public suffix list in cloud security.
Racing for Hidden Treasures in Public GitHub Repositories - Exploiting Build Artifacts
Explore a novel attack vector in GitHub Actions, uncovering hidden access tokens in build artifacts and racing against time to exploit ephemeral credentials for swift attacks on open-source projects.
Introduction to Fuzzing Using FFUF
Learn to use ffuf for efficient web application fuzzing, enhancing your bug bounty and penetration testing skills.
IAM Confused: Analyzing 8 Identity Breach Incidents
Dissection of 8 real cloud breaches exploiting insecure identities, revealing insights and mitigation strategies for better identity and access management in cloud environments.
Bugs Are Shallow - Finding Vulnerabilities in Top GitHub Projects
Explore techniques for identifying vulnerabilities in popular open-source projects on GitHub, enhancing your security research skills and contributing to safer software.
OAuth Secret: Advanced Exploitation Techniques - NahamCon 2024
Explore advanced OAuth exploitation techniques beyond simple redirect_uri attacks. Learn to chain multiple vulnerabilities for successful account takeovers in modern web applications.
Deep Dive Into AWS Instance Metadata - NahamCon 2024
Explore AWS instance metadata across EC2, ECS, and EKS, from basics to advanced container scenarios, enhancing your ability to maximize bug impact in cloud environments.
GitDigger: Creating Useful Wordlists from Public GitHub Repositories
Explore gitDigger: Create effective wordlists from GitHub repos for security testing. Learn techniques for mining, parsing, and leveraging public code repositories.
Web Penetration Testing Workshop: XSS and BeEF - Part 10 of 12
Explore XSS vulnerabilities and BeEF framework for web penetration testing, enhancing your cybersecurity skills with hands-on techniques and expert insights.
NOWASP Mutillidae 2: A Web Penetration Testing Environment for Secure Development
Explore web penetration testing techniques using NOWASP Mutillidae 2, a comprehensive environment for learning secure development practices and identifying vulnerabilities.
Hacking Web Applications - Attacking Authentication
Learn techniques for attacking authentication in web applications through live demonstrations and practical examples.
Web App Wednesday - Exciting XXE Injection
Explore XXE injection techniques for web application security, covering PortSwigger labs and practical hacking scenarios.
Command Injection Vulnerabilities in CI/CD Pipelines - Securing Bazel GitHub Actions
Discover critical security vulnerabilities in CI/CD pipelines through a case study of Bazel GitHub Action, learning practical strategies to protect your projects from command injection attacks.
Exploiting Bluetooth Vulnerabilities: From Vehicle Systems to Bank Account Access
Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicle systems using BlueToolkit, exploring real-world security implications and practical attack vectors in automotive and aviation contexts.
Taking Your DevOps Tooling to the Dark Side
Explore the dark side of DevOps tooling and its potential security implications in this thought-provoking conference presentation.
ChatGPT Examples for Programming, InfoSec, and Fuzzing
Explore ChatGPT's versatility in programming, security, and daily tasks. Learn to create fuzzers, analyze code, find vulnerabilities, and leverage AI for various applications.
Replicating OpenSSL Vulnerabilities CVE-2022-3602 and CVE-2022-3786 - How-to Guide
Replicate OpenSSL vulnerabilities CVE-2022-3602 and CVE-2022-3786 using provided test cases. Learn to exploit, test, and confirm these vulnerabilities in specific OpenSSL versions.