Bypassing EDR Detection: Userland Hooking Techniques and New Approaches
Explore advanced techniques for bypassing EDR solutions, including a new approach with Proof of Concept for understanding userland hooking and detection mechanisms.
Insecure Remote Operations: Windows Living Off the Land Techniques - Session 8
Dive into Windows remote operations security, exploring protocols, APIs, and admin tools through real-world examples. Learn powerful techniques for both defensive and offensive security operations.
Demystifying Thread Call Stack Spoofing - Advanced Techniques for Stack Manipulation
Dive into advanced thread stack spoofing techniques, combining stack frames forging with ROP and JOP to achieve stealthy module execution and call stack manipulation.
Windows Hello for Business Security Analysis and Authentication Protocol Deep Dive - Lecture 10
Explore Windows Hello for Business authentication internals, security vulnerabilities, and attack vectors in Azure AD environments, focusing on key provisioning and credential management.
Empowering Security Teams with Generative AI: GPT Models - Lecture 12
Explore how GPT models and large language models can enhance security research through few-shot learning, code generation, and retrieval augmentation techniques for security teams.
How Much Is The Phish? Evolving Defenses Against Evilginx Reverse Proxy Phishing
Dive into advanced techniques for defending against reverse proxy phishing attacks, focusing on Evilginx, MFA bypass methods, and implementing effective countermeasures.
Improving the Stealthiness of Memory Injection Techniques Using Python Ctypes
Delve into advanced memory injection techniques using Python ctypes, exploring stealthy methods like Module-Shifting for enhanced payload delivery and process manipulation.
Unraveling and Countering Adversary-in-the-Middle (AiTM) Phishing Attacks
Dive into advanced cybersecurity strategies for detecting and preventing Adversary-in-the-Middle phishing attacks, exploring real-world cases, detection methods, and practical defense techniques.
Addressing Tactics Related to Edge Device Compromise - Security Detection and Defense
Explore advanced threat hunting techniques and defense strategies against edge device compromises, focusing on detection methods, forensic analysis, and proactive security measures for network infrastructure.
Busting Red Team Trends with Style - Building a Custom ETW-Based Sysmon Replacement
Dive into advanced threat hunting with a custom ETW-based Sysmon replacement, exploring enhanced telemetry capabilities for detecting sophisticated red team techniques and threat actor fingerprinting.
Red Team Operations Recovery and Adaptation - Lessons from Fortune 500 Companies
Discover real-world red team operation mishaps and recovery strategies in Fortune 500 companies, exploring innovative TTPs development and mission success through candid insights from experienced security professionals.
Cloud Console Cartographer - Mapping Cloud Events for Security Analysis
Discover how to efficiently map and analyze cloud console activities with an open-source framework that simplifies the complex task of correlating hundreds of CloudTrail events to specific user actions.
Attacking and Defending Large Language Models in Production Environments
Explore essential security strategies and potential vulnerabilities of Large Language Models in production, covering attack vectors, defense mechanisms, and implementation best practices based on leading AI research.
Analyzing and Executing ADCS Attack Paths with BloodHound
Discover how to identify, analyze, and execute ADCS attack paths using BloodHound, while learning practical remediation strategies for defending against PKI-based privilege escalation in Active Directory environments.
Hiding C2 Communications in Plain Sight Using Windows Memory Page Permissions
Discover advanced techniques for hiding C2 communications by exploiting Windows memory page permissions, with practical approaches to building modular and stealthy command-and-control systems.
Kernel Games: The Ballad of Offense and Defense in Rootkit Methodologies
Dive into advanced kernel rootkit techniques for red team operations and defense strategies, covering stealthy persistence, EDR evasion, and practical detection methods with hands-on demos.
Innovate, Navigate, Elevate - A Journey into Offensive Security Entrepreneurship
Explore the challenges and opportunities in offensive security entrepreneurship, from industry dynamics to practical insights on building innovative security companies while maintaining hacker culture.
NTLM Relay Attacks - An OPSEC-Conscious Approach to Port 445 Takeover
Discover a stealthy technique for NTLM relay attacks by hijacking port 445/tcp, featuring reverse engineering insights and automation tools for enhanced SMB-based operations with minimal detection risk.
Modern Stuxnet-Style Attacks Using Filesystem Vulnerabilities and NTFS Exploits
Explore modern cyber attack techniques inspired by Stuxnet, focusing on filesystem vulnerabilities, NTFS exploits, and advanced persistence methods while learning effective defense strategies.
Evolution of Open Source Software: Perspectives from a Decade of Project Maintenance
Gain insights into the evolution of open source software through a decade-long journey of maintaining OWASP ZAP, the world's most popular web vulnerability scanner, shared by project lead Simon Bennetts.
Network Protocols and Their Impact on Application Performance
Explore how network protocol choices in microservices architecture impact system performance, reliability, and troubleshooting across application, transport, and system layers, with practical insights for optimization.