Clobbering the Cloud - Part 2
Explore advanced cloud security vulnerabilities, including clickjacking, sharing space issues, and custom language platforms. Learn defensive strategies and future directions in cloud protection.
Owning the Data Center Using Cisco NX-OS
Explore vulnerabilities in Cisco NX-OS, including hidden strings, GDB usage, and potential exploits. Learn about security risks and implications for data center management.
Forging Canon Original Decision Data
Explore Canon camera metadata, original decision data, and forensic techniques for camera identification with expert Dmitry Sklyarov in this technical presentation.
Adventures in SCADA
Explore SCADA systems' vulnerabilities and security challenges in industrial control environments, focusing on power companies, trust issues, and mitigation strategies.
I FOCA a MIL Domain
Explore metadata extraction, hidden information, and cybersecurity techniques with FOCA tool. Learn about targeting, internal servers, and DNS cache snooping in this comprehensive tutorial.
Femtocell - Femtostep to the Holy Grail
Explore femtocell technology, its advantages, security implications, and potential vulnerabilities in telecommunications networks through expert analysis and live demonstrations.
Netscreen of Death
Explore firmware vulnerabilities, live debugging, and real-world attacks on network security devices. Learn about untrusted code, scripting, and common criteria audits in this technical deep dive.
Tools of the Trade for a Modern CISO
Explore essential tools and strategies for modern CISOs, covering organizational roles, security frameworks, risk assessment, and effective communication in evolving cybersecurity landscapes.
.NET Access Control Service
Explore .NET Access Control Service for token-based authentication, federation, and secure resource access in Windows Azure environments.
Corporate Espionage via Mobile Compromise - A Technical Deep Dive
Explore corporate espionage via mobile compromise, including real-world examples, kill chain analysis, and demonstrations of exploits targeting PowerShell and Linux kernel vulnerabilities.
The Interim Years of Cyberspace - Security in a Domain of Warfare
Explore cyberspace security as a warfare domain, examining historical lessons, current threats, and strategies for a safer digital future.
Virtual Firewalls - The Good, the Bad and the Ugly
Explore virtual firewalls' advantages, drawbacks, and implementation challenges in cloud environments, covering performance, hardware, and configuration management considerations.
Your IPv6 Default Config Meets FOCA - And Starts to Cry
Explore IPv6 security vulnerabilities and attack techniques, including ARP spoofing and network advertisement spoofing, with practical demonstrations and expert insights.
The Future of Data Exfiltration and Malicious Communication
Explore advanced data exfiltration techniques, covert channels, and protocol engineering for secure communication. Learn about innovative approaches to network security and malicious traffic detection.
UI Redressing Attacks on Android Devices
Explore UI redressing attacks on Android devices, including clickjacking and new browserless attacks, along with mitigation techniques for improved mobile security.
Bluetooth - Does It Spark Joy?
Explore Bluetooth firmware reverse engineering, security insights, and bug-finding techniques in this deep dive into wireless technology vulnerabilities.
Alfred, Find the Attacker - A Primer on AI and ML Applications in the IT Security Domain
Explore AI and ML applications in IT security, covering classification, outlier detection, and user behavior analysis for enhanced protection and threat detection.
I'm in Your Cloud, Reading Everyone's Emails - Hacking Azure AD via Active Directory
Explore Azure AD vulnerabilities, hacking techniques, and security risks in cloud environments. Learn about AD Connect, crypto magic, and service principles to enhance your cybersecurity knowledge.
BloodHound and the Adversary Resilience Methodology
Explore BloodHound's advanced features for identifying security vulnerabilities, improving attack resilience, and enhancing Active Directory defenses through graph-based analysis.
Fun with LDAP and Kerberos - Attacking AD from Non-Windows Machines
Explore Active Directory attacks from non-Windows systems using LDAP and Kerberos. Learn techniques for reconnaissance, password spraying, and ticket forging to enhance your penetration testing skills.
From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It
Explore secure administration practices, vulnerabilities in traditional methods, and strategies to enhance cybersecurity in enterprise environments. Learn to protect privileged credentials and implement effective access controls.