ChatGPT for Cybersecurity
Explore ChatGPT's applications in cybersecurity, from pentesting and shell generation to blue team strategies. Learn to leverage AI for enhanced security practices and automation.
Python for Offensive Security in Ubuntu
Explora el uso de Python para desarrollar herramientas de seguridad ofensiva en Ubuntu, enfocándose en Ethical Hacking y Penetration Testing. Aprende a crear scripts personalizados para identificar y explotar vulnerabilidades.
How to Be an Ethical Hacker in 2022
Comprehensive guide to becoming an ethical hacker, covering foundational IT skills, networking, Linux, coding, and advanced topics like web app and wireless hacking, certifications, and exploit development.
OSED Review - Offensive Security Exploit Developer
Comprehensive review of Offensive Security Exploit Developer certification, covering course content, exam preparation, and practical tips. Includes Q&A addressing common concerns for aspiring exploit developers.
Meterpreter and Metasploit Development
Dive into advanced Meterpreter and Metasploit techniques, including extension unloading, exploit porting, Kiwi extension updates, pivoting strategies, and creating stealthy Windows threads.
Custom Java Deserialization Exploit - Serial Snyker
Explore Java deserialization vulnerabilities and create custom exploits for remote code execution in this hands-on tutorial, featuring practical examples and step-by-step guidance.
Using Ubuntu for Exploit Development
Explora técnicas y herramientas para crear y probar exploits de manera ética en Ubuntu, potenciando tus habilidades en seguridad informática con esta plataforma versátil.
A Journey Finding Pre and Post-Auth D-Link Router Zero-Days
Explora el proceso de descubrimiento y explotación de vulnerabilidades 0-day en routers D-Link, desde obtener acceso al firmware hasta identificar y explotar fallos de seguridad para lograr ejecución remota de código.
Descubriendo Tesoros Ocultos en el Mundo Java - Ekoparty 2023
Explora técnicas avanzadas de reconocimiento, detección y explotación de vulnerabilidades en Java, incluyendo una herramienta integral para automatizar procesos y mejorar la seguridad.
100 Vulnerabilities in 30 Days - Hacking the World's Largest Insurance Company
Descubre cómo un equipo de seguridad identificó 100 vulnerabilidades en 30 días en la mayor aseguradora mundial. Aprende métodos, herramientas y lecciones de este impresionante logro en bug bounty.
Introducción al Reversing - Ingeniería Inversa para Seguridad Informática
Introducción a la Ingeniería Inversa: fundamentos, aplicaciones en seguridad informática y herramientas esenciales. Ideal para principiantes interesados en exploits, análisis de malware y más.
Return to the Zombie Gadgets - Undermining Destructive Code Reads via Code-Inference Attacks
Explores techniques to bypass destructive code reads, a defensive strategy against code reuse attacks, through constructive reloads and code association via implicit reads, demonstrating vulnerabilities in this security approach.
Evaluation of the Executional Power in Windows Using Return Oriented Programming
Explore Windows vulnerabilities through Return Oriented Programming, evaluating execution power and discussing implications for system security in this IEEE workshop presentation.
Heap Models for Exploit Systems
Formal modeling of heap exploits as abstract machines, exploring physical and logical heap properties to express attacks as reachability problems in specific heap configurations.
Unleashing Mayhem on Binary Code
Explore automated exploit generation for binary programs using hybrid symbolic execution and index-based memory modeling. Learn techniques to find and demonstrate exploitable vulnerabilities efficiently.
Trickle Down PwnOnomics
Learn how to succeed in bug bounty hunting, from zero experience to consistent earnings, with practical tips and strategies for effective vulnerability discovery and reporting.
MarkDoom- How I Hacked Every Major IDE in 2 Weeks - Matt Austin, LevelUp 2017
Explore web hacking techniques used to exploit major IDEs and desktop applications, revealing high-severity vulnerabilities in popular development tools.
It's Not a Vulnerability, It's a Feature - Exploiting Built-in Functionality
Explore how offensive security has evolved from CVEs to TTPs, and learn to leverage built-in features for security testing and potential monetization through creating and sharing TTPs.
Learning Server Side Request Forgery Basics Using Portswigger's Web Security Academy
Explore Server Side Request Forgery (SSRF) basics through hands-on practice with Portswigger's Web Security Academy, enhancing your web security skills and understanding of this critical vulnerability.
Pentest Story Time - My Favorite Hacks
Engaging talk sharing real-world pentesting experiences and favorite hacking techniques. Offers valuable insights for cybersecurity professionals and aspiring ethical hackers.
Xenpwn - Breaking Paravirtualized Devices
Explore techniques for exploiting vulnerabilities in paravirtualized devices, focusing on Xen hypervisor security and potential attack vectors in virtualized environments.