Social Engineering for Penetration Testers
Explore social engineering techniques, their evolution, and practical applications in penetration testing. Learn from real-world examples and scenarios to enhance your security assessment skills.
Hacking Invisibly and Silently with Light and Sound
Explore innovative hacking techniques using light and sound, from C2 channels and exfiltration to disrupting motion detectors and speech jamming. Learn advantages, disadvantages, and mitigation strategies for these unconventional attacks.
From Weakest Link to Retaliation Weapon - Building Efficient Anti-Social Engineering Awareness Program
Explore effective strategies for building resilience against social engineering threats, drawing insights from behavioral science and real-world applications in high-risk environments.
HTML5 - A Whole New Attack Vector
Explore HTML5's new features from an attacker's perspective, uncovering potential security vulnerabilities and innovative attack vectors in modern web browsers.
Introducing the Smartphone Penetration Testing Framework
Comprehensive framework for assessing smartphone security in organizations, covering various attack vectors and providing tools for penetration testing across multiple platforms.
Hacking the Law- Are Bug Bounties a True Safe Harbor? - USENIX Enigma Conference - 2018
Exploring legal risks in bug bounties, advocating for hacker rights, and proposing standardized terms to create safe harbors for ethical hackers participating in vulnerability disclosure programs.
Racketeer - Prototyping Ransomware Operations - Dimitry Snezhkov - Ekoparty 2021 - Red Zone Space
Explore el diseño e implementación de Racketeer, una herramienta ofensiva para simular y prototipar operaciones de ransomware controladas en entornos empresariales, con enfoque en seguridad y gestión de datos.
Experiencias en Google VRP - Yesenia Trejo y Adrián Pedrazzoli - Ekoparty - 2021: Bug Bounty Space
Expertos en seguridad comparten experiencias en el Programa de Recompensas por Vulnerabilidades de Google, abordando aspectos positivos, desafiantes e inesperados del proceso de reporte y explotación de vulnerabilidades.
Staying Sane Doing Bug Bounties - Sean Zseano - Ekoparty 2021: Bug Bounty Space
Consejos para mantener la cordura en la búsqueda de recompensas por errores, abordando desafíos comunes y compartiendo experiencias valiosas para principiantes y profesionales.
From Zero to Trello - Gabriel Tarsia - Ekoparty 2021: Bug Bounty Space
Aprende a utilizar Trello para optimizar tu trabajo en Bug Bounty. Descubre técnicas de búsqueda, acceso a tableros y recomendaciones para mejorar tu eficiencia como cazador de vulnerabilidades.
Mobile Hacking - Bastian Mühlhauser - Becoming Malicious: Android Chapter - Ekoparty Security Conference
Explora la arquitectura de Android, análisis de manifiestos, abuso de componentes y construcción de agentes maliciosos para comprender y mejorar la seguridad en aplicaciones móviles.
Hackeando Aplicaciones móviles de ¿Seguridad?
Demostración de vulnerabilidades en aplicaciones móviles de seguridad mediante ingeniería inversa e instrumentación dinámica, con casos de estudio reales de applockers, control parental y anti-robo.
#Eko2020 Bounty Hunters | Adrian Pedrazzoli: XSS de -1 a 0
Aprende técnicas básicas para detectar XSS, tipos, recursos necesarios y ejemplos de hallazgos en programas de Bug Bounty. Incluye recomendaciones prácticas para cazadores de recompensas.
Social Engineering - Emiliano Piscitelli: Pretextos y el Metodo P.I.C.O - Ekoparty Security Conference - 2020
Descubre cómo crear pretextos efectivos en ingeniería social utilizando el Método P.I.C.O. Aprende de ataques reales y mejora tus habilidades en esta charla de la Ekoparty Security Conference.
All Roads Lead to OpenVPN Pwning Industrial Remote Access Clients - Sharon Brizinov - Hack in Paris - 2021
Uncover critical vulnerabilities in industrial remote access solutions using OpenVPN, potentially leading to remote code execution. Learn about the risks and implications for cybersecurity.
Exploits in Wetware - R. Sell - Hack in Paris - 2019
Discover social engineering tactics, real-world attacks, and protective strategies. Learn about OSINT techniques, vishing strategies, and methods to safeguard organizations against evolving threats in this eye-opening presentation.
Social Forensication: A Multidisciplinary Approach to Successful Social Engineering - J.Gray - Hack in Paris - 2019
Explore innovative social engineering techniques, including memory image analysis and rogue Wi-Fi attacks, along with defensive strategies and ethical considerations for cybersecurity professionals.
From Printed Circuit Boards to Exploits: Pwning IoT Devices Like a Boss - Damien Cauquil - Hack in Paris - 2018
Explore hardware hacking of a Bluetooth smartlock, from circuit board analysis to exploit development, covering electronics basics, reverse engineering, and mobile app vulnerabilities.
Nonverbal Human Hacking - Chris Hadnagy - Hack in Paris
Explore nonverbal human hacking techniques, including NLP, body language, and microexpressions, to understand how social engineers manipulate targets for easier access to companies.
Security for Vulnerable Populations - On the Interplay of - Daniela Oliveira - USENIX Enigma - 2017
Explores older adults' vulnerability to spear-phishing, analyzing susceptibility based on psychological influence tactics and life domains. Offers insights for developing targeted cybersecurity solutions.
Case Studies in Embedded VR - Silvio Cesare - Ekoparty Security Conference - 2022
Explore cutting-edge techniques in embedded VR security, focusing on router vulnerabilities, reverse engineering, and exploit development through real-world case studies.