OSINT for the Win - Tools and Techniques to Maximize Effectiveness of Your Social Engineering
Explore OSINT techniques to enhance social engineering effectiveness, covering principles of persuasion, intel gathering methods, and mitigation strategies for improved cybersecurity.
Hacking the Human - Social Engineering Basics
Learn social engineering techniques, from basic principles to advanced methods like industrial espionage and attraction trust, while understanding potential dangers and pitfalls in human manipulation.
How to Hack All the Bug Bounty Things Automagically Reap the Rewards Profit
Learn automated bug bounty techniques to efficiently discover vulnerabilities, report findings, and maximize rewards in ethical hacking programs.
Predator to Prey - Tracking Criminals with Trojans and Data Mining for Fun and Profit
Explore tracking techniques for stolen devices, from USB hacks to data mining, with ethical considerations and real-world case studies in digital forensics and cybersecurity.
Attacking ADFS Endpoints with PowerShell
Explore ADFS endpoint vulnerabilities and attack techniques using PowerShell, focusing on authentication bypass, federation info retrieval, and user enumeration in Office 365 environments.
How to Social Engineer Your Way into Your Dream Job
Learn techniques to strategically position yourself for your ideal career through social engineering, focusing on courage, reconnaissance, and effective self-presentation.
SQL Server Hacking on Scale Using PowerShell
Explore SQL Server hacking techniques using PowerShell, covering server discovery, login access testing, privilege escalation, and post-exploitation strategies for enhanced security awareness.
Attacking EvilCorp - Anatomy of a Corporate Hack
Explore corporate hacking techniques, from enumerating targets to exploiting Kerberos, with insights on attack paths and essential mitigations for enhanced cybersecurity.
HTTP Security Headers You Need To Have On Your Web Apps
Explore essential HTTP security headers to protect web apps from vulnerabilities. Learn implementation techniques and see live demos of their impact on site security.
Defending Against Robot Attacks
Explore physical and social robot attacks through live demos, learning practical defenses for your workspace and home against potential robotic threats.
ROP is Still Dangerous - Breaking Modern Defenses
Explores advanced Return Oriented Programming attacks, demonstrating vulnerabilities in modern defense mechanisms and proposing strategies to overcome security measures like kBouncer and ROPecker.
Cisco SMB Products - Critical Vulnerabilities - 0-Day Release
Detailed examination of critical 0-day vulnerabilities in Cisco SMB switches, including web application and API exploits, leading to complete endpoint compromise and data leakage.
Personal Information Leakage by Abusing the GDPR 'Right of Access'
Explores GDPR 'Right of Access' vulnerabilities, revealing how impersonation tactics can lead to unauthorized data access. Offers insights on improving identity verification processes for enhanced data protection.
Bypass CFG in Chrome
Explore advanced techniques for bypassing Control Flow Guard (CFG) in Chrome, including analysis of previous methods and examination of current vulnerabilities.
ChaosDB - How We Hacked Databases of Thousands of Azure Customers
Uncover critical Azure Cosmos DB vulnerability allowing unauthorized admin access to thousands of customer databases. Learn about the discovery, exploitation, and implications of this unprecedented cloud security flaw.
From Logic to Memory - Winning the Solitaire in Reparse Points
Explore advanced Windows file redirection vulnerabilities, bypassing mitigations with novel exploit techniques. Learn about reparse points, logic flaws, and memory corruption in system services.
Achieving Linux Kernel Code Execution Through a Malicious USB Device
Explore Linux kernel exploitation via malicious USB devices, focusing on CVE-2016-2384 vulnerability. Learn about USB-based attacks, payload delivery, and mitigation strategies.
Bypassing Windows Hello for Business and Pleasure
Explore vulnerabilities in Windows Hello's face recognition, demonstrating how attackers can bypass this passwordless authentication using a crafted USB device.
Breaking Secure Bootloaders
Explore techniques to bypass secure bootloaders, including signature verification vulnerabilities, memory analysis, and firmware update exploits. Learn to identify and exploit weaknesses in modern device protection mechanisms.
Hacking a Capsule Hotel - Ghost in the Bedrooms
Explore IoT vulnerabilities in capsule hotels, revealing how six exploits can be combined to control bedrooms and potentially disrupt noisy neighbors.
Deepfake Social Engineering - Creating a Framework for Synthetic Media Social Engineering
Explore the risks of deepfake technology in social engineering, learn about a new framework for understanding these attacks, and discover practical countermeasures to protect against synthetic media threats.