Putting Your Mind to It - Bug Bounties for 12 Months
Insights into successful bug bounty hunting strategies and experiences over a 12-month period, focusing on mindset, persistence, and effective techniques for finding vulnerabilities.
Hacking IIS
Explore advanced IIS hacking techniques, including HTTPAPI 2.0 assets, VHost hopping, local file disclosure, and complex XXE vectors. Learn to leverage tools like DNSpy for effective web application security testing.
Learn to Hack - Choose a Target - Get a Bounty
Practical guide to overcoming initial challenges in bug bounty hunting, covering automation, reconnaissance, common vulnerabilities, and essential hacking skills for beginners.
Just Give Me a Trial, Please
Overcoming obstacles in hacking enterprise software for bug bounty programs: experiences and advice on tackling third-party vendor products and obtaining trial access.
Hardware-Enforcement of Walther-Recursive Program Functions
Explore hardware-enforced restrictions on computational complexity using JIT compilation and Intel's Processor Tracing to improve security through limited return-oriented programming.
Your Exploit is Mine - Automatic Shellcode Transplant for Remote Exploits
Innovative technique for automatic shellcode transplantation in remote exploits, enabling efficient reuse and adaptation of existing exploits with new shellcode through symbolic tracing and layout remediation.
Facebook's Approach to Common Web Vulnerabilities
Explore Facebook's strategies for combating web vulnerabilities, including XSS, CSRF, and SQL injection, through security libraries, automated detection, and lint rules.
Security Theatre
Explore web security threats, vulnerabilities, and best practices. Learn about encryption, authentication, and strategies to protect against hacks and social engineering in this comprehensive talk.
Beyond the Borders of Scope
Explore unconventional recon techniques for bug bounty programs, focusing on out-of-scope assets to uncover unique vulnerabilities in core applications.
Hacking on Bug Bounties for Five Years
Discover the evolution of bug bounty hunting over five years, exploring successful techniques, favorite vulnerabilities, and lessons learned to help you replicate success in ethical hacking.
H@cktivityCon 2020 - From an 'IVI in a Box' to a 'Car in a Box'
Explore car hacking techniques, from 'IVI in a box' to 'CAR in a box', with insights on safely experimenting without damaging your own vehicle. Learn from real-world experiences and practical tips.
Attacking Wide Scopes
Explore techniques for attacking wide-scope targets in bug bounty programs. Learn strategies to identify vulnerabilities and maximize your impact when dealing with extensive attack surfaces.
Leveraging Bug Bounties for Your Career
Discover how bug bounty hunting can boost your cybersecurity career. Expert hackers share insights on skill development, networking, and leveraging experiences for future opportunities.
Breaking VNC Clients with Evil Servers
Explore VNC client vulnerabilities and learn how malicious servers can exploit them. Gain insights from an award-winning hacker on application security and sustainable DevSecOps practices.
The Bug Hunter's Methodology - Application Analysis
Discover advanced techniques for application analysis in bug hunting with insights from a top-ranked researcher. Learn recon strategies and web app vulnerabilities to enhance your ethical hacking skills.
Vulnerabilities I've Found - The Fun, the Weird and the Technical
Explore unique vulnerabilities discovered by hacker Roni Carta, inspired by Arsene Lupin. Learn creative exploitation techniques and gain insights into the world of ethical hacking.
Submitting High Quality Bug Bounty Reports - Tips from Behind the Curtain
Learn insider tips for crafting high-quality bug bounty reports from Roy Davis, an experienced security researcher and manager of Zoom's Bug Bounty program. Gain valuable insights to improve your submissions.
Delving Deep into Cyber Security and Ethical Hacking
Demystifying cybersecurity and ethical hacking, exploring career opportunities, debunking myths, and revealing essential attributes for aspiring hackers in a fun and engaging manner.
Remotely Compromising iOS via Wi-Fi and Escaping the Sandbox
Explore iOS vulnerabilities through Wi-Fi networks, including sandbox escapes and kernel bugs. Learn about attack vectors, exploitation techniques, and security implications for mobile devices.
Breaking BHAD - Abusing Belkin Home Automation Devices
Exploración de vulnerabilidades en dispositivos de automatización del hogar Belkin WeMo, revelando fallas de seguridad y demostrando ataques potenciales en la infraestructura IoT.
Exploiting Curiosity and Context - How to Make People Click on a Dangerous Link
Explores how curiosity and context influence clicking on dangerous links, analyzing user behavior and reasoning to improve cybersecurity strategies and protection mechanisms.