DNS Tunnelling - It's All in the Name!
Explore DNS tunneling techniques for data exfiltration and command-and-control, including detection methods and practical demonstrations of this stealthy network attack vector.
Finux's Historical Tour of IDS Evasion, Insertions and Other Oddities
Explore the history and limitations of network intrusion detection systems, examining evasion techniques and inherent problems while critically evaluating vendor claims and industry acceptance.
Easy Ways to Bypass Anti Virus Systems
Discover simple techniques to evade antivirus systems, including signature detection, emulation, sandboxing, and firewalls. Learn how attackers can bypass popular security measures with minimal effort and resources.
CSRFT - A Toolkit for CSRF Vulnerabilities
Explore a Python-based toolkit for exploiting CSRF vulnerabilities, including demos of complex exploitation techniques and a custom HTTP proxy for injecting malicious iframes.
Layers on Layers - Bypassing Security for Fun and Profit V2
Explore kernel vulnerabilities in Windows and their impact on security solutions. Learn how to bypass multiple layers of protection and discuss more robust defensive strategies.
MITRE D3FEND
Explore MITRE D3FEND, a knowledge graph of cybersecurity countermeasures. Learn about its structure, use cases, and how it complements the ATT&CK framework for enhanced defensive strategies.
DFIR - Don't Forget Your Roots
Explore essential DFIR skills, from understanding applications and APIs to analyzing C2 beacons, with insights from an experienced practitioner's career journey.
Think Zero Days Are Your Biggest Risk - Think Again
Explore cyber hygiene beyond zero-day threats, understanding vulnerabilities and advisories to enhance overall security posture and risk management.
JWTs and Why They Suck
Explore the pitfalls of JWTs, their unnecessary complexity, and better alternatives for secure authentication in web applications.
Big Data Lake, Big Data Leak
Explore the security risks associated with big data lakes and learn strategies to prevent data leaks in large-scale data storage systems.
MITRE D3FEND
Explore MITRE D3FEND, a framework for cybersecurity defense techniques. Learn about its structure, applications, and how it complements ATT&CK to enhance organizational security posture.
Introduction to Red Team Tooling and Opsec
Explore modern red team techniques, tools, and operational security practices for effective penetration testing and cybersecurity assessments.
The Challenges of Remediation During a Cyber Incident
Explore strategic, technical, and industry-wide challenges in cybersecurity incident remediation, featuring a real-world case study and expert insights.
When Encryption Fails
Explore encryption vulnerabilities, software development challenges, and security frameworks to enhance your understanding of cybersecurity risks and mitigation strategies.
Stalkerware in Mobile Devices
Explore the dangers of stalkerware on mobile devices and learn effective detection and prevention strategies to protect your privacy and security.
Turning Your Weapons Against You
Exploiting security tools: Learn how vulnerability scanners and NAC solutions can be manipulated, common misconfigurations, and methods to capture enterprise credentials. Includes demos and remediation strategies.
Mission Assurance in Closed, Proprietary Systems
Innovative approach to assessing security in air-gapped, proprietary systems, addressing unique challenges and threat vectors in isolated environments.
Using Network Miner to Reconstruct Network Traffic
Learn to extract and reconstruct network traffic data using NetworkMiner, enhancing your understanding of internet data transmission and streamlining the process of bulk resource extraction from packet captures.
Automation in Application Security
Discover strategies for preventing application attacks through automation, enhancing security beyond traditional mitigation and detection methods.
Connecting the Dots - A Beginner's Experience of Threat Actor Tracking
Explore threat actor tracking through a beginner's perspective, covering setup, tools, and techniques for identifying and analyzing malicious activities.
How to - Actually Attack Computers at Cafes
Discover real-world techniques for compromising computer security in public spaces, exploring vulnerabilities and ethical considerations in Wi-Fi networks.