Outside the Box - Hacking
Explore innovative penetration testing techniques, including phishing, physical implants, and token hunting, to enhance security assessments and identify vulnerabilities beyond traditional methods.
Does Anyone Remember Enterprise Security Architecture
Explore enterprise security architecture with Rockie Brockway, covering compliance, complexity, threat modeling, defense in depth, and metrics for effective organizational protection.
Hacking IIS and NET
Explore IIS and .NET security vulnerabilities, learn hacking techniques, and discover preventive measures for robust web application protection.
Phishing - Going from Recon to Credentials
Explore phishing techniques, from reconnaissance to credential harvesting, covering attack types, setup, deployment, and post-exploitation strategies. Learn about prevention, detection, and response measures.
High Performance Fuzzing
Explore advanced fuzzing techniques for enhanced software security, covering target selection, input generation, execution monitoring, and failure detection.
Robots Ninjas Pirates and Building an Effective Vulnerability Management Program
Explore effective vulnerability management through a unique lens of robots, ninjas, and pirates. Learn prevention, detection, and reaction strategies to enhance cybersecurity.
Running Away from Security - Web App Vulnerabilities and OSINT Collide
Explore web app vulnerabilities and OSINT techniques, focusing on fitness tracking apps and their potential security risks. Learn to protect your online presence and data.
Quick Intro to Lock Picking
Learn essential lock picking techniques, tools, and ethics. Explore various lock types, bypass methods, and security considerations in this comprehensive introduction to physical security.
Stick a Pin in Certificate Pinning - How to Inspect Mobile Traffic and Stop Data Exfiltration
Learn techniques to inspect mobile traffic, prevent data exfiltration, and understand certificate pinning. Explore mobile app virtualization, trusted SSL proxies, and hardware-protected clients for enhanced security.
What Do Infosec Practitioners Actually Do
Explore the daily realities of information security professionals, debunking myths and highlighting key skills like writing, problem-solving, and effective communication in various cybersecurity roles.
Modern Approach to Incident Response
Explore modern incident response strategies, including automation, threat intelligence, and AI, to enhance cybersecurity practices and reduce response times for various threats.
Live Forensic Acquisition Techniques
Explore live forensic acquisition techniques, including disc forensics, DNS cache analysis, and targeted searches, to enhance digital investigation skills.
What Is a Security Analyst and What Job Role Will They Perform
Explore the role of a security analyst, their responsibilities, and key cybersecurity concepts. Learn about attack chains, compliance, and the security investigation process.
PlagueScanner - An Open Source Multiple AV Scanner Framework
Open source framework for multiple antivirus scanning, covering architecture, development lessons, features, and issues. Includes live demo and discussion on threat connectivity.
Getting Windows to Play with Itself - A Pen Testers Guide to Windows API Abuse
Explore Windows API manipulation for penetration testing, covering DLL injection, persistence techniques, and HTTP exploits. Learn practical skills for enhancing security assessments and understanding system vulnerabilities.
Active Directory Real Defense for Domain Admins
Learn practical strategies to secure Active Directory, including limiting Domain Admin accounts, setting logon restrictions, and implementing best practices for enhanced network protection.
Give Me Your Data - Obtaining Sensitive Data Without Breaking In
Learn techniques for legally obtaining sensitive data, exploring data loss prevention, hardware analysis, and social media investigations with cybersecurity expert Dave Chronister.
The Internet of Insecure Things - 10 Most Wanted List
Explore top 10 security vulnerabilities in Internet of Things devices, covering privacy concerns, industrial systems, and medical applications. Learn about real-world exploits and potential solutions.
The Human Buffer Overflow aka Amygdala Hijacking
Explore amygdala hijacking and its role in social engineering. Learn how emotions can be manipulated to influence behavior and decision-making in various scenarios.
Interceptor - A PowerShell SSL MITM Script
Explore PowerShell SSL MITM techniques, including web privilege escalation, certificate creation, HTTP request handling, and response injection. Learn practical applications and script extensions.
Hunting Malware on Linux Production Servers - The Windigo Backstory
Explore advanced malware hunting techniques on Linux servers, focusing on Operation Windigo. Learn about compromised infrastructure, expansion methods, and evasion tactics used by sophisticated attackers.