The Past, Present & Future of Enterprise Security
Evolution of enterprise security: from traditional methods to automated attacks. Explores sophisticated tactics, tools, and techniques reshaping Active Directory vulnerabilities and domain privilege escalation.
Weaponizing Rsync 0Day Vulnerability
Discover a critical 25-year-old vulnerability in Rsync enabling code execution and silent lateral network movement. Learn about its discovery, impact, and weaponization from PRODAFT researchers.
I Know What Your Microsoft Mainframe Did Last Summer
Explore Active Directory forensics, lateral movement, and reconnaissance techniques. Learn to hunt for clues without AD logs using open-source tools in this hands-on session with real-world incident insights.
The Blackbear Project
Explore a modified OpenSSH daemon that enhances post-exploitation capabilities, bypasses network restrictions, and provides reliable interactive shell access for penetration testing and security research.
Bypassing Microsoft Defender for Identity
Explore techniques to bypass Microsoft Defender for Identity, executing high-impact attacks across the kill chain while avoiding detection in on-premises Active Directory environments.
Lateral Movement and Privilege Escalation in GCP - Compromise Organizations without Dropping an Implant
Explore techniques for identity compromise, privilege escalation, and lateral movement in Google Cloud. Learn about GCP's unique security model and default permissions, with demonstrations and tool releases.
ClickOnce and You're in - When Appref-ms Abuse is Operating as Intended
Explore .appref-ms file abuse for malicious purposes, including deployment methods, user perspective, and techniques to enhance and mask nefarious capabilities.
Planning and Executing a Red Team Engagement
Planning and executing a red team engagement: strategies, tools, and techniques for simulating real-world cyber attacks to assess and improve an organization's security posture and incident response capabilities.
TeamTNT - Explosive Cryptomining
Explore TeamTNT's cryptojacking tactics targeting Linux servers, including their attack methods, credential theft, and evolution from Docker instances to Windows systems.
A Year in the Red
Explore advanced red team tactics, including domain fronting, ADFS attacks, and sandbox evasion. Gain insights into offensive and defensive strategies for the coming year.
Account Jumping Post Infection Persistency & Lateral Movement in AWS
Explore AWS security vulnerabilities, infection methods, and post-infection techniques. Learn about account jumping, resource manipulation, and best practices for protecting cloud environments.
Nakatomi Space - Lateral Movement as L1 Post-Exploitation in OT
Explore lateral movement techniques in OT networks, focusing on vulnerabilities in L1 devices. Learn about BPCS/SIS architectures, exploit chains, and hardening strategies to enhance industrial control system security.
Introduction to Red Team Tooling and Opsec
Explore modern red team techniques, tools, and operational security practices for effective penetration testing and cybersecurity assessments.
The Industrial Revolution of Lateral Movement
Explore advancements in targeted attacks and lateral movement techniques, examining their impact on cybersecurity and potential parallels to the Industrial Revolution.
Taranis
Explore Windows security vulnerabilities and advanced exploitation techniques in this in-depth presentation on the Taranis attack framework.
The New SaaS Cyber Kill Chain
Exploring the evolving cyber kill chain in SaaS-native organizations, discussing new attack vectors, lateral movement techniques, and persistent threats in cloud-based environments.
Gray Hat PowerShell
Explore advanced PowerShell techniques for ethical hacking and security testing, focusing on leveraging built-in Windows tools for penetration testing and system analysis.
Lateral Movement - Harlan Carvey
Explore lateral movement techniques in cybersecurity with expert Harlan Carvey, covering detection methods, prevention strategies, and key aspects of the kill chain.
Micro Segmentation and Security - The Way Forward
Explore micro-segmentation and zero trust principles for enhanced network security, reducing attack surfaces and lateral movement in modern cybersecurity landscapes.
Stable 37 - Comparing Apples to Apple
Explore macOS security concepts, credential access, privilege escalation, and persistence techniques in this comprehensive overview of Apple system vulnerabilities and defenses.
Movement After Initial Compromise
Explore advanced techniques for lateral movement in compromised networks, focusing on post-exploitation strategies and stealthy persistence methods.