NTLM Relay, Token Impersonation, Pass the Hash, PsExec, and More
Explore advanced Active Directory exploitation techniques including NTLM relay, token impersonation, and pass-the-hash attacks. Learn practical skills for penetration testing and network security.
Wireshark and Fortigate
Learn to analyze network traffic, detect security threats, and configure Fortigate firewalls using Wireshark for effective network protection and monitoring.
How Big Data Makes a Safer Place to Exchange Digital Information - Simon Edwards, Trend Micro
Explore advanced cybersecurity strategies, including zero-day initiatives, machine learning, and threat analysis, to enhance digital information exchange safety and combat evolving cyber threats.
Mastering the Maze - Reinforcement Learning for Automated Penetration Testing
Explore how reinforcement learning can revolutionize penetration testing by automating lateral network movement and identifying attack vectors, enhancing efficiency in cybersecurity assessments.
2016 State of Vulnerability Exploits
Explore vulnerability exploits, their trends, and defense strategies in this comprehensive overview of the cybersecurity landscape, featuring insights on exploit kits and prioritization.
Exploiting Group Policy Objects for Persistence and Lateral Movement
Explore how Group Policy Objects can be exploited for malware distribution and network persistence. Learn about PowershellEmpire modules and countermeasures for enhanced cybersecurity in enterprise environments.
Windows Red Team Lateral Movement Techniques - PsExec and RDP
Explore lateral movement techniques on Windows using PsExec and RDP. Learn how adversaries pivot through systems to gain access and achieve objectives stealthily.
Attacking and Defending Supply Chains - How We Got Admin in Your Cloud
Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.
Detecting Credential Abuse - Core Concepts and Challenges
Explore detection strategies for credential abuse, including core concepts, patterns, and challenges. Learn to identify suspicious activity and protect systems from unauthorized access.
Securing Cloud-Native DevOps - A Zero Trust Approach
Explore Zero Trust principles for securing cloud-native DevOps environments, addressing challenges like supply chain attacks and lateral movement in microservices and serverless architectures.
Dissecting an Iranian Nation State Interactive Intrusion - Watching Kittens at Play
Dissect an Iranian nation-state intrusion, gaining insights into adversarial tactics. Learn threat hunting techniques to uncover and counter sophisticated cyber attacks in your environment.
Deconstructing Control Plane Compromise Attacks in Cloud Environments
Explore cloud control plane compromise attacks, learn how hackers exploit architectural flaws, and discover strategies for identifying and mitigating risks in your cloud environment.
Bypassing Falco - How to Compromise a Cluster without Tripping the SOC
Explore techniques to bypass Falco's default ruleset, enabling stealthy cluster compromise. Learn 9 bypass classes for target enumeration, privilege escalation, and lateral movement without alerting security teams.
The Attacker Perspective - Insights From Hacking Alibaba Cloud's Managed Kubernetes Environments
Explore real-world hacking of managed Kubernetes environments, from initial access to unauthorized database access. Learn to strengthen deployments and enhance security posture through this step-by-step case study.
From the Cluster to the Cloud: Lateral Movements in Kubernetes
Explore techniques for lateral movement from Kubernetes containers to cloud resources, covering RBAC misconfigurations, authentication methods, and real-world incidents. Learn prevention and detection strategies.
Kubernetes to Cloud Attack Vectors: Demos of Cross-Environment Vulnerabilities
Explore attack vectors between managed Kubernetes clusters and cloud environments. Learn best practices for securing EKS, AKS, and GKE against lateral movement and compromise.
Living off the Land Techniques in Managed Kubernetes Clusters
Explore advanced techniques for exploiting managed Kubernetes clusters, including privilege escalation, lateral movement, and security control bypasses using cluster middleware and components.
Exploitation Techniques and Attacks on Hosting Assets and Access for Resale
Exploration of underground markets for compromised network assets, covering exploitation techniques, lateral movement, monetization, and defender strategies for incident response and security monitoring.
From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes
Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.
A Journey into Red Team
Explore stealthy techniques for effective red team operations, including lateral movement, phishing, and post-exploitation strategies to evade detection and succeed in penetration testing.
Six Degrees of Domain Admin
Explora cómo la teoría de grafos revoluciona la escalada de privilegios en Active Directory, revelando relaciones ocultas y optimizando tanto ataques como defensas en redes empresariales.