Pixel Tracking - How It's Used and Abused
Explore pixel tracking's uses and misuses, including email tracking, online spying, and data leaks. Learn about protection methods and privacy implications.
Continuous Skills Improvement For Everyone
Explore continuous skills improvement strategies, from hands-on labs to bug bounty programs. Learn to stand out professionally, set goals, and develop both technical and soft skills.
Early Detection through Deception
Explore early threat detection through deception techniques, including examples of network intrusion, system compromise, and phishing prevention strategies.
Hack for Show, Report for Dough - Brian King
Learn effective techniques for crafting compelling penetration testing reports that resonate with both technical and non-technical audiences, enhancing communication and impact.
Bash Can Get Uglier - Using Bashfuscator to Generate Bash Obfuscation
Explore advanced Bash obfuscation techniques using Bashfuscator, from basic methods to complex strategies like subshells and parameter expansions, enhancing your scripting skills.
You Moved to Office 365 - Now What
Explore Office 365 security, auditing, and protection strategies. Learn about cloud attack prevention, Azure Sentinel, and identity protection to enhance your organization's cloud security posture.
Embrace the Red - Enhancing Detection Capabilities with Adversary Simulation
Enhance detection capabilities through adversary simulation techniques. Learn to leverage offensive skills, conduct purple teaming, and test resilience using tools like Password Frame and Empire Spray.
Enterprise Security Monitoring - Seeing Clearly with Security Onion - Wes Lambert
Learn to implement enterprise-level security monitoring using Security Onion, covering tools, data types, interfaces, and deployment strategies for effective threat detection and analysis.
Killsuit - The Equation Group's Swiss Army Knife for Persistence, Evasion, and Data Exfil
Explore the Equation Group's sophisticated persistence, evasion, and data exfiltration tool, examining its features, installation methods, and exploitation techniques.
Attacking Azure Environments with PowerShell
Learn to exploit Azure environments using PowerShell, covering data dumping, modules, and various services. Gain insights into escalation techniques and practical demonstrations.
Bug Hunting in RouterOS
Explore RouterOS vulnerabilities, including developer backdoors, key negotiation, and protocol analysis. Learn about CVEs and policy discovery techniques for enhanced network security.
So Many Pentesting Tools from a 4 Arduino
Explore Arduino-based pentesting tools for embedded devices, including logic analyzers, memory dumpers, and RFID snoopers. Learn to build and use these tools for security testing.
Perfect Storm - Taking the Helm of Kubernetes
Explore Kubernetes security, from container basics to advanced attack techniques and cloud security considerations, with practical insights and defensive strategies.
VBA Stomping Advanced Malware Techniques
Explore advanced malware techniques using VBA, including XML manipulation, object linking, and process creation. Learn about frameworks, reverse engineering, and analysis tools.
Detecting WMI Exploitation
Learn techniques to detect and prevent WMI exploitation, covering tools, processes, and best practices for enhanced Windows security and threat hunting.
Android App Penetration Testing 101
Learn Android app penetration testing essentials, including tools, methodologies, and practical techniques for identifying vulnerabilities and securing mobile applications.
A Journey of Payload Delivery
Explore innovative payload delivery techniques, focusing on evasion, encryption, and minimizing attribution. Learn about Firefox Send, Web Crypto API, and weaponizing file-sharing services.
Offensive Browser Extension Development
Learn to develop and analyze browser extensions, exploring potential security risks and malicious behaviors in web store submissions and installations.
DeepCorr - Strong Flow Correlation Attacks on Tor Using Deep Learning
Learn about DeepCorr, a machine learning approach to enhance flow correlation attacks on Tor, exploring its architecture, effectiveness, and potential countermeasures.
Unearthing Malicious and Risky OpenSource Packages Using Packj
Explore PACKJ, a security framework for detecting risky open-source packages. Learn about supply chain attacks, defense strategies, and real-world examples to enhance your software security practices.
Pushing Security Left by Mutating Byte Code
Explore techniques for building secure software through bytecode mutation, including obfuscation, encryption, and cross-compilation to protect against reverse engineering and enhance product security.