TruffleHog Chrome Extension - Open CORS in SAAS API's Lead to Leaky Keys
Discover API keys hidden in web pages with the open-source TruffleHog Chrome extension. Learn how to use this tool and explore real-world examples of exposed keys in SaaS APIs with open CORS.
Haptyc - A Library for Building Microfuzzers in Turbo Intruders
Explore Haptyc, a Python library enhancing Turbo Intruder with advanced fuzzing capabilities. Learn to create modular, reusable transforms for powerful and efficient HTTP request testing in web security assessments.
Hacking on Bug Bounties for Five Years
Discover the evolution of bug bounty hunting over five years, exploring successful techniques, favorite vulnerabilities, and lessons learned to help you replicate success in ethical hacking.
Launching an InfoSec Career
Explore diverse paths to cybersecurity careers, from CTFs to bug bounties. Learn key strategies for success, including self-teaching, building a unique skill set, and leveraging your online presence as a resume.
You've Got Pwned - Exploiting E-Mail Systems
Explore common technical attacks on email systems and real-world examples from bug bounty programs, enhancing your understanding of email security beyond spam and phishing.
H@cktivityCon 2020 - From an 'IVI in a Box' to a 'Car in a Box'
Explore car hacking techniques, from 'IVI in a box' to 'CAR in a box', with insights on safely experimenting without damaging your own vehicle. Learn from real-world experiences and practical tips.
Attacking Wide Scopes
Explore techniques for attacking wide-scope targets in bug bounty programs. Learn strategies to identify vulnerabilities and maximize your impact when dealing with extensive attack surfaces.
What I Learnt from a Year of Triaging Bug Bounty Reports
Insights from a year of triaging bug bounty reports, covering key lessons learned, common pitfalls, and effective strategies for successful vulnerability reporting and management.
Leveraging Bug Bounties for Your Career
Discover how bug bounty hunting can boost your cybersecurity career. Expert hackers share insights on skill development, networking, and leveraging experiences for future opportunities.
Breaking VNC Clients with Evil Servers
Explore VNC client vulnerabilities and learn how malicious servers can exploit them. Gain insights from an award-winning hacker on application security and sustainable DevSecOps practices.
The Bug Hunter's Methodology - Application Analysis
Discover advanced techniques for application analysis in bug hunting with insights from a top-ranked researcher. Learn recon strategies and web app vulnerabilities to enhance your ethical hacking skills.
Vulnerabilities I've Found - The Fun, the Weird and the Technical
Explore unique vulnerabilities discovered by hacker Roni Carta, inspired by Arsene Lupin. Learn creative exploitation techniques and gain insights into the world of ethical hacking.
Submitting High Quality Bug Bounty Reports - Tips from Behind the Curtain
Learn insider tips for crafting high-quality bug bounty reports from Roy Davis, an experienced security researcher and manager of Zoom's Bug Bounty program. Gain valuable insights to improve your submissions.
All Your -Data-base Are Belong To Us
Explore vulnerability research in office applications through fuzzing, code review, and reverse-engineering. Learn to discover and exploit zero-days, with insights on binary exploitation for curious researchers.
Delving Deep into Cyber Security and Ethical Hacking
Demystifying cybersecurity and ethical hacking, exploring career opportunities, debunking myths, and revealing essential attributes for aspiring hackers in a fun and engaging manner.
Building Flexible, Low-Cost Wireless Access Networks With Magma
Magma: An open system for building affordable wireless networks in underserved areas, leveraging Internet design patterns and SDN principles to reduce costs and complexity while maintaining key cellular features.
Synthesizing Runtime Programmable Switch Updates
Explores FlexPlan, a tool for safe runtime updates of programmable switches. Discusses techniques for generating step-by-step plans that maintain correctness and memory constraints during live reconfigurations.
Ichthyology - Phishing as a Science
Explore real-world phishing attacks, psychological tactics, and advanced prevention techniques. Learn evidence-based strategies to protect against credential theft in this insightful cybersecurity presentation.
Cloak & Dagger - From Two Permissions to Complete Control of the UI Feedback Loop
Unveiling Android vulnerabilities: combining permissions for stealthy UI control attacks, exploring security mechanisms, and discussing potential countermeasures and Android team responses.
Breaking the x86 Instruction Set
Uncover hidden x86 instructions and hardware bugs through innovative processor fuzzing techniques and page fault analysis, revealing chipset secrets.
Revoke-Obfuscation - PowerShell Obfuscation Detection and Evasion Using Science
Explore PowerShell obfuscation detection techniques using scientific methods, including character frequency analysis, cosine similarity, and machine learning algorithms for improved cybersecurity.