The Bug Hunter's Methodology v4.0 - Recon Edition
Comprehensive guide to reconnaissance techniques for bug bounty hunters, covering advanced methods to identify vulnerabilities and expand attack surfaces in web applications.
Finding XSS on Apple.com and Building a Proof of Concept to Leak Your PII
Discover how to find XSS vulnerabilities on high-profile websites and create effective proof-of-concept exploits to demonstrate potential data leakage risks.
Continuous Intrusion - Hacking CI Systems
Explore techniques for exploiting vulnerabilities in Continuous Integration systems, focusing on security risks and potential attack vectors in the software development pipeline.
Breaking Into Cloud Wallets - Hacking Crypto Web Apps
Explore cloud wallet vulnerabilities and crypto web app hacking techniques in this talk by @samwcyo, covering blind XSS, SQL injection, and account takeovers in the cryptocurrency ecosystem.
Effectively Finding Vulnerabilities by Debugging the Source Code
Discover effective techniques for identifying vulnerabilities through source code debugging. Learn to enhance your bug hunting skills and improve your ability to find security flaws in software.
Recon Fundamentals by Example
Explore recon fundamentals through practical examples in this offensive security talk. Learn essential techniques for effective reconnaissance in bug bounty and penetration testing.
Finding 0days in Enterprise Web Applications
Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.
The Bug Hunter's Methodology - Application Analysis v1
Comprehensive guide to application analysis for bug hunters, covering advanced techniques, tools, and methodologies to identify vulnerabilities and maximize bounty rewards.
Career and Community Building with Bug Bounties
Panel discussion on leveraging bug bounties for career growth, knowledge expansion, and community building in infosec. Experts share insights on how bug bounties have impacted their professional journeys.
Putting Your Mind to It - Bug Bounties for 12 Months
Insights into successful bug bounty hunting strategies and experiences over a 12-month period, focusing on mindset, persistence, and effective techniques for finding vulnerabilities.
Hacking IIS
Explore advanced IIS hacking techniques, including HTTPAPI 2.0 assets, VHost hopping, local file disclosure, and complex XXE vectors. Learn to leverage tools like DNSpy for effective web application security testing.
Learn to Hack - Choose a Target - Get a Bounty
Practical guide to overcoming initial challenges in bug bounty hunting, covering automation, reconnaissance, common vulnerabilities, and essential hacking skills for beginners.
Just Give Me a Trial, Please
Overcoming obstacles in hacking enterprise software for bug bounty programs: experiences and advice on tackling third-party vendor products and obtaining trial access.
Using Chromedp to Hunt for Prototype Pollution
Learn to use Chromedp in Go for detecting prototype pollution at scale, enhancing your ability to identify and address this client-side security vulnerability efficiently.
Microsoft Ignite 2021 - Empowering Hybrid Work and Innovation
Explore the future of hybrid work, cloud innovation, and cybersecurity with Satya Nadella. Learn to empower teams, build next-gen apps, and protect your organization in a changing digital landscape.
Microsoft Ignite Highlights for Latin America - Spanish Session
Resumen de los principales anuncios y aspectos destacados de Microsoft Ignite, presentado por expertos y ejecutivos de Microsoft América Latina en español.
The Invasion of Bad Drivers
Explore vulnerabilities in peripheral drivers, including a 0day discovery, exploitation techniques, and mitigation strategies. Learn about common security risks and how to protect your system.
Security Journey in French Network Access Controller
Exploration des vulnérabilités des contrôleurs d'accès réseau, en particulier Alcasar. Analyse des failles de sécurité et des moyens de contournement, avec focus sur l'authentification et la protection des mots de passe.
Hardware befreien - Briefbeschwerer, oder gehört die Hardware wirklich mir?
Entdecken Sie, wie Reverse Engineering und Community-Engagement Ihre Geräte von Herstellerabhängigkeit befreien können. Lernen Sie, wie jeder zur Nachhaltigkeit von Hardware beitragen und deren Lebensdauer verlängern kann.
Why Not Having Control Over Your Data is a Ticking Time Bomb
Explore the risks of data control loss and the potential of decentralized credentialing in the digital age. Learn how to protect your personal information and navigate the future of data management.
Burnout Culture is a Cyber Risk
Discover how burnout culture increases cyber risk and why human-centered approaches are crucial for organizational resilience and cybersecurity improvement.