Modmob Tools - Home Made Tools to Test Mobile Devices and Monitor Networks
Explore homemade tools for testing mobile devices and monitoring networks, covering interception techniques, firmware analysis, and hardware auditing for enhanced security understanding.
Microsoft IT - Secure Journey to IPv6-Only
Explore Microsoft's transition to IPv6-only networks, covering industry pressures, implementation challenges, and key lessons learned in this technical deep dive.
Introducing Faction - A Modern, Powerful, Multiplayer C2 Framework
Explore Faction, a modern multiplayer C2 framework. Learn its modular design, accessibility, and key features through live demos and in-depth explanations of its components and functionality.
A Diet of Poisoned Fruit - Designing Implants and OT Payloads for ICS Embedded Devices
Explore designing implants and payloads for ICS embedded devices, covering discovery, attack design, and damage stages in cyber-physical attacks on industrial control systems.
Hardware Side Channel Attacks on the Cheapest
Explore side channel attacks on low-cost hardware, covering power analysis, encryption vulnerabilities, and practical demonstrations. Learn acquisition techniques and countermeasures.
Hitting the Gym - The Anatomy of a Killer Workout
Explore security vulnerabilities in smart fitness equipment, focusing on treadmills. Learn about potential risks, attack surfaces, and implications for both users and corporate environments.
Vehicle Alarms' Insecurity and Something Else
Explore vulnerabilities in vehicle alarm systems, including signal transmitters, deactivation methods, and remote control weaknesses. Learn about code knocking and motion detector flaws.
Sneaking Past Device Guard
Explore techniques to bypass Device Guard, focusing on lateral movement, trusted locations, and ActiveScript vulnerabilities in Windows environments.
Medical Device Security - Please Don't Be Patient
Explore medical device security challenges, classifications, and vulnerabilities in healthcare organizations. Learn about regulatory guidelines and real-world examples of device defects and potential exploits.
Comparing WAF and RASP - Why?
Explore the differences and complementary roles of WAF and RASP in application security, understanding their strengths and limitations for comprehensive protection.
API Security - Is it the New Application Attack Surface and How to Secure at Enterprise Scale
Explore API security challenges, threats, and enterprise-scale solutions. Learn about modern attack surfaces, recent breaches, and effective strategies for protecting sensitive data in API-driven architectures.
Privacy Impact Assessments - How Much Privacy Is Enough?
Explore privacy impact assessments, their methodologies, and how they differ from security risk assessments. Learn to model and measure privacy impacts for effective Privacy by Design implementation.
Your Frontier Defense - Understanding Web Application Firewalls
Explore WAF options, features, and challenges across cloud providers and self-managed solutions for enhanced web application security and defense-in-depth strategies.
Doing This One Crazy Thing Will Change Your AppSec Program Forever
Discover how to revolutionize your AppSec program through effective communication, prioritization, and innovative strategies for securing software development.
Using the Threat Modeling Manifesto to Build an Enterprise Threat Modeling Program
Learn to build an enterprise threat modeling program using the Threat Modeling Manifesto. Discover key principles, benefits, and practical tips for implementing effective security practices across your organization.
The Final Frontier - Automating Dynamic Security Testing
Automating dynamic security testing: strategies for efficient, scalable DAST integration in software delivery pipelines, addressing challenges and trade-offs for seamless DevSecOps implementation.
Insiders Guide to Mobile AppSec with OWASP MASVS
Explore mobile app security essentials using OWASP MASVS, covering data storage, network issues, authentication, and anti-tampering. Learn practical tools and tactics for effective mobile pen testing and security assessment.
Detection Engineering Methodologies
Comprehensive methodology for engineering effective threat detections, covering structure, processes, and technologies for a successful detection program.
Reversing Client Side JavaScript Using the Chrome Dev Tools Protocol
Explore Chrome Dev Tools protocol for JavaScript reversal, bug finding, and vulnerability detection. Learn to modify web app behavior and automate pentesting tasks using Go-based plugins.
A Stratagem on Strategy - Rolling Testing into Product Testing
Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.
Being a Cyberdefender - Behind the Curtains
Explore the realities of cyberdefense, including incident management, communication challenges, and maintaining work-life balance in this insightful talk by a seasoned professional.