How to Rob a Bank Over the Phone
Explore social engineering techniques used in phone-based bank fraud, understanding vulnerabilities and prevention strategies to enhance cybersecurity awareness and defense mechanisms.
The History of the Future of Cyber Education
Explore the evolution of cybersecurity education, from analog engineers to neural networks, and its impact on humanity's future. Gain insights into key historical milestones and emerging trends in the field.
Stable Clippy for the Dark Web - Looks Like You're Trying to Buy Some Dank Kush - Can I Help You With
Explore the intersection of AI and dark web marketplaces, examining potential implications for cybersecurity and online transactions.
Stable Red Teaming Gaps and Musings
Explore red teaming limitations, real-world hacks, and strategies to overcome scope constraints. Learn to replicate hardware compromises and leverage cloud vulnerabilities.
IRS, HR, Microsoft and Your Grandma - What They All Have in Common
Explore the unexpected connections between the IRS, HR, Microsoft, and your grandmother in this intriguing talk on common vulnerabilities and social engineering tactics.
Fuzz Your Smartphone from 4G Base Station Side
Explore smartphone vulnerabilities through 4G base station fuzzing techniques, enhancing mobile security knowledge and practical skills.
From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It
Explore vulnerabilities in secure administration practices and learn effective strategies to enhance domain security and prevent unauthorized access.
LOLBins - Nothing to LOL About
Explore the world of LOLBins (Living Off the Land Binaries) and their potential security risks in this eye-opening presentation by Oddvar Moe at Derbycon 2018.
I Can Be Apple and So Can You
Learn how to impersonate Apple's code signing process, exploring techniques to bypass security measures and gain insights into digital certificate manipulation.
Synfuzz - Building a Grammar Based Retargetable Test Generation Framework
Explore a grammar-based, retargetable test generation framework for efficient and comprehensive software testing, enhancing security and reliability.
Invoke EmpireHound - Merging BloodHound Empire for Enhanced Red Team Workflow
Explore advanced red team techniques by merging BloodHound and Empire for enhanced workflow and more effective penetration testing strategies.
When Macs Come Under ATTCK
Explore Mac-specific adversary tactics and techniques, enhancing your understanding of macOS security threats and defense strategies.
State of Win32k Security - Revisiting Insecure Design
Explore Win32k security vulnerabilities and design flaws, focusing on recent developments and potential attack vectors in Windows operating systems.
Abusing IoT Medical Devices for Your Precious Health Records
Explore vulnerabilities in connected medical devices and their potential impact on patient data security, with insights on exploiting IoT healthcare systems.
Stable 08 LOL They Placed Their DMZ in the Cloud - Easy Pwnage or Disruptive Protection
Explore innovative cloud-based DMZ strategies, comparing traditional designs with new models and discussing their implications for network security and defense-in-depth approaches.
Maintaining Post Exploitation Opsec in a World with EDR
Explore advanced techniques for maintaining operational security during post-exploitation phases, focusing on strategies to evade detection by Endpoint Detection and Response (EDR) systems.
Hey I Found a Vulnerability - Now What
Explore the process of responsible vulnerability disclosure, from discovery to coordinated vendor communication, with insights on effective reporting and ethical considerations.
MS17 010 Zerosum0x0
Explore MS17-010 vulnerability, its exploitation, and mitigation strategies in this comprehensive analysis by security expert zerosum0x0.
The Unintended Risks of Trusting Active Directory
Explore security risks in Active Directory, including security descriptors, environments, and objects. Learn about weaponization, persistence, and existing misconfigurations in this comprehensive analysis.
Lessons Learned by the WordPress Security Team
Explore WordPress security insights, user-centric approaches, and lessons from the WordPress Security Team's experiences in maintaining and improving platform safety.
Gryffindor Pure JavaScript Covert Exploitation
Explore advanced JavaScript techniques for covert exploitation in red team operations, covering browser wars, security models, and analysis methods.