Active Directory Security Best Practices
Explore Active Directory security best practices with experts Kuhn and Wiederkehr, covering essential strategies to protect your organization's critical infrastructure and data.
Arming Small Security Programs Network Baseline Generation with Bropy
Learn to generate network baselines for small security programs using Bropy, enhancing threat detection and response capabilities in resource-constrained environments.
IPv6 Configuration Approaches for Servers
Explore IPv6 configuration strategies for servers, covering key approaches and best practices to enhance network security and performance in modern IT infrastructures.
Offensive Hunting - Using Blue Team Techniques in Red Team Ops
Explore offensive hunting techniques combining red and blue team approaches. Learn to leverage data from various sources during extensive red teaming operations for more effective penetration testing.
Mobile Operators vs. Hackers - New Security Measures for New Bypassing Techniques
Explore mobile network security measures and hackers' evolving techniques to bypass them. Learn about SMS Home Routing, signaling firewalls, and sophisticated attack methods in this insightful talk.
Results of a Security Assessment of the Internet Protocol Version 6
Comprehensive security assessment of IPv6 protocol suite, highlighting vulnerabilities, implementation challenges, and best practices for secure deployment in modern networks.
I Am Become Loadbalancer, Owner of Your Network
Explore load balancer architecture, operation, and deployment. Learn post-breach access, avoiding detection, and implementing persistent implants. Valuable for both offensive operations and defensive strategies.
Build Yourself a SNMP Replacement - And Make SSH Pay for It
Wireless-Netzwerkmanagement ohne SNMP: Python und SSH für effektives Monitoring. Umgehung von Hardware-Einschränkungen und Integration von Splunk und Observium.
Weaponizing Rsync 0Day Vulnerability
Discover a critical 25-year-old vulnerability in Rsync enabling code execution and silent lateral network movement. Learn about its discovery, impact, and weaponization from PRODAFT researchers.
How to Measure the Security of Your Network Protection Devices
Explore methods to quantify network security device performance, efficacy, and risk. Learn to assess defensive appliances for better security design and network protection strategies.
Hacking 5G Is No Rocket Science
Explore API attacks in 4G/5G IoT networks, revealing vulnerabilities and discrepancies between security standards and real-world implementations. Learn about potential threats and defense strategies for mobile IoT infrastructure.
Software Defined Snort With Barnyard & Pulled Pork For NIDPS
Explore software-defined networking for enhanced network security, focusing on DDoS defense and traffic programming using Snort and its dependencies to mitigate WAF bypass attempts.
Service Workers vs Corporate Firewalls
Explore how service workers can be exploited to bypass corporate firewalls, potentially compromising network security. Learn about this innovative attack vector and its implications.
Easterhegg 2019 - Domain-Automatisierung mit Cryptdomainmgr
Automatisierung von TLS-Zertifikaten, TLSA-Domaineinträgen und DKIM-Schlüsseln mit Cryptdomainmgr. Erneuerung in drei Phasen für lückenlose Sicherheit ohne Ausfallzeiten.
Sneaking in Network Security
Leveraging service discovery for transparent network segmentation using mutual TLS, enhancing security without disrupting development or requiring downtime. Lessons from implementing strong access controls at scale.
Dissecting Broadcom Bluetooth
Explore Broadcom Bluetooth firmware vulnerabilities and modifications using InternalBlue framework. Learn about security risks, pairing behavior alterations, and a remote exploit affecting popular devices.
What the Fax?
Exploración de vulnerabilidades en máquinas de fax, demostrando cómo comprometer redes a través de líneas telefónicas y exponiendo riesgos de seguridad en tecnología obsoleta pero ampliamente utilizada.
Hunting the Sigfox - Wireless IoT Network Security
Dissecting Sigfox's IoT network protocol, revealing security vulnerabilities and presenting an open-source alternative. Explores radio technology, cryptography, and potential attacks on this emerging low-power wide-area network.
IT-Sicherheit in vernetzten Gebäuden
Einführung in Sicherheitsprobleme und Lösungsansätze für vernetzte Gebäude am Beispiel des KNX-Standards. Beleuchtet Risiken, Datenschutzaspekte und Möglichkeiten zur nachträglichen Verbesserung der IT-Sicherheit in Gebäudeautomatisierungssystemen.
BADPDF - Stealing Windows Credentials via PDF Files
Discover how PDF files can be weaponized to leak Windows NTLM hashes, potentially compromising user credentials without interaction or exploitation. Learn about PDF structure and see a proof-of-concept demonstration.
Network Monitoring via SSH and ELK
Netzwerküberwachung ohne SNMP: Verwendung von SSH, Python und ELK Stack für effektives Monitoring. Praxisnahe Einblicke in alternative Methoden zur Datenerfassung und -analyse von Netzwerkhardware.