Shellcode Time - Come on Grab Your Friends - Wartortell
Explore shellcode creation techniques, from assembly basics to advanced concepts like modular payloads and JSON objects, enhancing your understanding of low-level programming and security.
Attacking Microsoft Kerberos - Kicking the Guard Dog of Hades
Explore advanced techniques for exploiting vulnerabilities in Microsoft Kerberos authentication, enhancing your cybersecurity skills and understanding of network security protocols.
More New Shiny in the Metasploit Framework
Explore new Metasploit Framework features including enhanced credential handling, browser exploit improvements, and post-exploitation tools for Firefox and Android. Learn about infrastructure updates and future development plans.
DDoS Botnet - 1000 Knives and a Scalpel
Explore DDoS botnets and their impact, from large-scale attacks to precise targeting. Learn about detection, mitigation, and the evolving landscape of cyber threats.
Hackers Are People Too
Explore the human side of hacking, challenging stereotypes and understanding the motivations, ethics, and diverse backgrounds of hackers in the cybersecurity landscape.
Mirage Next Gen Honeyports
Explore next-generation honeyport technology with Mirage, enhancing network security through advanced deception techniques and threat intelligence gathering.
Ethical Control - Ethics and Privacy in a Target Rich Environment
Explore ethical considerations and privacy challenges in cybersecurity, focusing on balancing security needs with individual rights in data-rich environments.
How to Secure and Sys Admin Windows Like a Boss
Learn essential techniques for securing and administering Windows systems effectively, covering best practices and advanced strategies for robust system management.
GROK Atlas
Explore GROK atlas, a powerful tool for network visualization and analysis, enhancing your ability to understand complex network structures and relationships.
How Building a Better Hacker Accidentally Built a Better Defender
Explore how improving hacker skills inadvertently enhances defensive capabilities, offering insights into cybersecurity dynamics and the interplay between offense and defense.
Making Mongo Cry - Attacking NoSQL for Pen Testers
Learn techniques for attacking NoSQL databases, focusing on MongoDB vulnerabilities and exploitation methods for penetration testers and security professionals.
The Wireless World of the Internet of Things
Explore wireless IoT vulnerabilities, attack vectors, and security measures. Learn about Bluetooth specifications, key management, and practical techniques for securing embedded devices.
GET A Grip on Your Hustle - Glassdoor Exfil Toolkit
Explore a toolkit for extracting and analyzing Glassdoor data, offering insights into company information and employee reviews for strategic decision-making and market research.
Hardware Tamper Resistance - Why and How
Explore hardware tamper resistance techniques, from physical systems to electronic solutions, and learn about new approaches like machine-verifiable seals and secure multiparty computation.
Gone in 60 Minutes - A Practical Approach to Hacking an Enterprise
Practical approach to hacking an enterprise using Yasuo tool. Covers shell generation, exploiting vulnerabilities in Tomcat and Jenkins, and password extraction techniques.
Powercat
Explore PowerCat, a versatile PowerShell-based netcat alternative, for network communication and security testing. Learn its features and applications from expert Mick Douglas.
Penetrate Your OWA
Explore techniques for penetrating Outlook Web Access (OWA) and enhancing your security testing capabilities in this informative DerbyCon 4 presentation.
Third Party Code - Fix All the Things
Explore strategies for managing third-party code vulnerabilities and learn effective approaches to mitigate risks in software development and security.
Macro Malware Lives - Putting the Sexy Back into MS Office Document Macros
Explore advanced macro techniques in MS Office for payload delivery, including PowerShell integration, obfuscation methods, and automation strategies for enhanced effectiveness.
Girl Fault Interrupted
Explore hardware vulnerabilities and fault injection techniques in modern computing systems, focusing on security implications and potential exploits.
Snarf Capitalizing on Man in the Middle
Explore techniques for exploiting Man-in-the-Middle vulnerabilities, focusing on network security and potential attack vectors.