Watching the Watchers - Exploiting Vulnerable Monitoring Solutions
Explore vulnerabilities in monitoring solutions and learn techniques to exploit them, enhancing your cybersecurity skills and understanding of potential risks in surveillance systems.
Ransomware Emulation Done Right
Explore effective ransomware emulation techniques for enhanced cybersecurity preparedness. Learn practical strategies to simulate and defend against evolving ransomware threats.
All Your Ether Are Belong to Us - Hacking Ethereum-based DApps
Explore Ethereum-based DApp vulnerabilities and hacking techniques, focusing on smart contract security and potential exploits in decentralized applications.
I Love My BFF - Brute Force Framework
Explore the Brute Force Framework for password cracking, learning effective techniques and strategies to enhance cybersecurity testing and penetration assessments.
The Sednit Group, Cyber Espionage in Eastern Europe
Explore the Sednit group's cyber espionage tools, recent campaigns, and exploitation techniques targeting Eastern Europe, with a focus on Ukraine-related topics and custom exploit-kits.
CTF or WTF?
Compara desafíos CTF con pruebas de penetración reales, explorando similitudes y diferencias en habilidades, escenarios y lecciones aprendidas para profesionales de ciberseguridad.
Hacking K-12 School Software in a Time of Remote Learning
Análisis de vulnerabilidades en software educativo durante la pandemia, explorando ataques potenciales y sus implicaciones para la seguridad de dispositivos escolares y domésticos.
Ghosts of XSS Past, Present & Future
Explore the evolution of Cross-Site Scripting (XSS) vulnerabilities, their impact on web security, and strategies for mitigation in this comprehensive presentation by a leading industry expert.
Web Application Firewall Workshop
Hands-on workshop exploring Web Application Firewall bypass techniques, including encoding, SQL injection, protocol switching, and syntax alternatives. Practical exercises with in-depth explanations for each method.
Request Smuggling 101
Explore HTTP Request Smuggling attacks, risks, and payloads. Learn to detect and mitigate vulnerabilities in load balancers and proxies. Includes live demonstration and practical mitigation strategies.
Only an Electron Away from Code Execution
Explore security vulnerabilities in Electron framework, focusing on XSS risks in desktop applications. Learn about attack vectors, CVEs, and see live demos of exploiting vulnerable Electron apps.
Stupid RedTeamer Tricks
Discover simple yet effective red teaming tricks to enhance assessments, including improved USB key drops, C&C concealment, and social engineering techniques using Outlook.
Not Safe For Organizing - The State of Targeted Attacks Against Civil Society
Exploration of targeted cyber attacks against civil society groups, focusing on Tibetan community and Latin American cases. Discusses attacker tactics, victim impacts, and future trends.
Stupid Pentester Tricks
Discover creative hacking techniques to overcome pentesting challenges. Learn RFID cloning, universal access cards, key theft methods, and advanced phishing strategies for unconventional target compromise.
EMET 5.2 - Armor or Curtain?
Explore advanced exploitation techniques to bypass EMET 5.2 mitigation strategies, enhancing your understanding of cybersecurity vulnerabilities and defense mechanisms.
M33tfinder
Discover M33tfinder: a tool for identifying vulnerable web applications. Learn offensive security techniques from an experienced researcher in this informative conference talk.
Video Game Hacks, Cheats, and Glitches
Explore video game hacks and glitches, drawing parallels to modern security vulnerabilities. Learn how gaming exploits relate to real-world cybersecurity challenges.
A Journey into Red Team
Explore stealthy techniques for effective red team operations, including lateral movement, phishing, and post-exploitation strategies to evade detection and succeed in penetration testing.
Penetration Testers versus Initial Access Brokers - Helping the Good Guys Win
Explore the battle between penetration testers and initial access brokers, gaining insights to strengthen cybersecurity defenses and protect against evolving threats.
SolarWinds One Year Later - The Story of an Unauthenticated RCE in the Orion Platform
Explore the aftermath of the SolarWinds breach, focusing on an unauthenticated remote code execution vulnerability in the Orion Platform. Gain insights into cybersecurity implications and lessons learned.
Automatic Exploitation of Critical CVEs Using Sniper - ProxyShell, OMIGOD and More
Explore automatic exploitation of critical CVEs using Sniper, including ProxyShell and OMIGOD vulnerabilities. Learn about cutting-edge hacking techniques and information security practices.