Outlook and Exchange for the Bad Guys - Nick Landers
Explore Outlook and Exchange vulnerabilities, focusing on reconnaissance, credential collection, and rule exploitation. Learn about security challenges and practical use cases.
Adaptation of the Security Sub Culture
Explore the evolution of security subculture and its impact on modern cybersecurity practices with insights from industry experts Rockie Brockway and Adam Hogan.
Beyond the Crypt - Practical iOS Reverse Engineering
Explore practical iOS reverse engineering techniques to uncover hidden app functionalities and enhance mobile security understanding.
Next Gen Web Pen Testing - Handling Modern Applications in a Penetration Test
Explore modern web application security with insights on WebSockets, REST APIs, and Content Security Policy. Learn practical penetration testing techniques for next-gen web technologies.
Real World Attacks vs Checkbox Security
Explore real-world cybersecurity attacks and their contrast with checkbox security practices. Gain insights into effective defense strategies beyond compliance-driven approaches.
ARRR Maties
Learn about web accessibility standards and guidelines for creating inclusive digital experiences, focusing on Section 508 compliance and WCAG principles.
Advanced Targeted Attack
Explore advanced targeted attack techniques, including worldwide reach, PSF, and Golden Ticket, to enhance your cybersecurity knowledge and defense strategies.
Cyber False Flags and Adversarial Counterintelligence - Oh My
Explore cyber false flags and adversarial counterintelligence techniques, uncovering deception strategies and countermeasures in the digital realm.
Stable 10 - Getting Dirty on the CANBUS
Explore CANBUS technology and its applications in automotive systems, focusing on security implications and potential vulnerabilities in modern vehicles.
How Do I Detect Technique X in Windows - Applied Methodology to Definitively Answer This Question
Learn a systematic approach to detect specific techniques in Windows, enhancing your ability to identify and analyze potential security threats and vulnerabilities.
Scientific Computing for Information Security - Forging the Missing Link
Explore scientific computing's role in information security, focusing on data analytics, automation, and practical examples to enhance effectiveness and solve industry challenges.
It Must Be Fancy Bear
Explore attribution challenges in cybersecurity, focusing on the complexities of identifying threat actors and the pitfalls of hasty conclusions in cyber attack investigations.
Hacking Humans - Addressing Vulnerabilities in the Advancing Medical Device Landscape
Explore vulnerabilities in medical devices and their impact on human health, discussing potential risks and security measures in the evolving healthcare technology landscape.
Stable 06 Modlishka Is a Mantis Eating 2FAs Lunch
Explore Modlishka, a powerful tool for bypassing two-factor authentication, and its implications for cybersecurity in this insightful presentation by Lance Peterman.
Defeating Next Gen AV and EDR Using Old and New Tricks on New Dogs
Explore techniques to bypass advanced antivirus and endpoint detection systems using a combination of established and innovative methods for enhanced cybersecurity testing.
The Hackers Apprentice
Explore hacking techniques and strategies with Mark Baggett in this insightful presentation from Derbycon 2019, offering valuable knowledge for aspiring cybersecurity professionals.
Behavioral Security and Offensive Psychology at Scale
Explore behavioral security and offensive psychology techniques for large-scale applications, focusing on practical strategies to enhance organizational cybersecurity posture.
Not a Security Boundary - Breaking Forest Trusts
Explore techniques for breaking forest trusts in Active Directory environments, uncovering vulnerabilities and potential attack vectors in cross-forest authentication.
To CORS - The Cause of and Solution to Your SPA Problems
Explore CORS issues in Single Page Applications, their causes, and effective solutions for improved web development and security.
Stable 05 - There's No Place like DUALHomed
Explore dual-homed network configurations and their security implications in this informative talk by David E Young Jr, covering potential risks and mitigation strategies.
DevSecOps Security Testing with CICD Automation Servers
Learn to integrate security testing into DevOps workflows using CI/CD automation servers, enhancing software development processes and improving overall security posture.