IPC - The Broken Dream of Inherent Security
Explore vulnerabilities in inter-process communication (IPC) systems, including network sockets, Windows named pipes, and USB devices. Learn about potential attacks and mitigation strategies.
Bypassing ISP and Enterprise Anti-DDoS with 90's Technology
Explore techniques for bypassing anti-DDoS measures using older technologies, focusing on UDP data analysis, intelligence gathering, and protocol effectiveness.
Threat Hunting in the Cloud
Explore cloud security challenges, attacker strategies, and effective threat hunting techniques in AWS and Azure environments. Learn to protect against and detect sophisticated cloud-based attacks.
Trick or Treat - Unveil the "Stratum" of the Mining Pools
Unveil mining pool strategies, identify Stratum servers, and explore cryptomining malware detection techniques through static and dynamic analysis, web scraping, and network scanning.
The Blackbear Project
Explore a modified OpenSSH daemon that enhances post-exploitation capabilities, bypasses network restrictions, and provides reliable interactive shell access for penetration testing and security research.
Abusing Webhooks for Command and Control
Explore techniques for establishing covert command and control communication using webhooks, bypassing strict network defenses and avoiding detection in penetration testing scenarios.
Disabling Encryption to Access Confidential Data
Explore techniques for disabling encryption to access confidential data, including man-in-the-middle attacks, AWS vulnerabilities, and TLS exploits. Learn practical methods and necessary tools for intercepting encrypted communications.
Securing Robots at Scale
Explore robot security challenges, attack surfaces, and protection strategies for hardware, software, and user privacy in the era of widespread robotic adoption.
Pwning Software-Defined Networking - SDN
Explore software-defined networking vulnerabilities, focusing on OpenFlow, controllers, and REST APIs. Learn to manipulate traffic flow and exploit SDN weaknesses.
Zero Trust Networks - In Theory and in Practice
Comprehensive exploration of Zero Trust Networks, covering theory, implementation strategies, key systems, and practical considerations for enhanced network security.
Sinking Your Hooks in Applications
Techniques for automatically enhancing application security through code hooking and injection, demonstrated across Java, .NET, and Ruby frameworks without requiring developer intervention.
Windows Phone App Security for Builders and Breakers
Explore Windows Phone app security for developers and testers, covering encryption, secure data handling, and protection against common vulnerabilities and attacks.
Mantra OS - Because the World is Cruel
Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and risk mitigation strategies.
Exploring the Latest Open-Source Python API for Oracle Database Applications
Discover Oracle's latest Python module for database applications, featuring a "thin" mode for easier configuration and efficient runtime, plus best practices for installation and upgrading.
Internet Balkanization in an Era of Military Conflict - Dan Demeter - DefCamp - 2022
Explore internet fragmentation amid military conflicts, examining global examples, cyber attacks, and potential solutions for a more connected digital world.
Recipe for a Beginner in Bug Bounty Hunting - DefCamp - 2021
Comprehensive guide for beginners in bug bounty hunting, covering scope definition, research techniques, tools like Axiom, and reporting strategies for successful vulnerability discovery.
Cryptography Demystified
Einführung in die Grundlagen der Kryptographie ohne mathematische Vorkenntnisse. Erklärt Verschlüsselung, Authentifizierung, Zertifikate und sichere Verbindungen für ein breites Publikum.
Neues Werkzeug für moderne Netzwerksicherheit
Einführung in moderne Netzwerksicherheit mit Fokus auf nftables und WireGuard. Technische Details, Implementierungsunterschiede und praktische Anwendungen für Linux-Administratoren werden vorgestellt.
Introduction to Home Network Security
Beginner-friendly guide to network segmentation for enhanced privacy and security in home networks. Covers basic networking concepts, threats, and practical steps to reduce risks in the era of IoT.
Cyber Necromancy - Reverse Engineering Dead Protocols - DefCamp - 2014
Explore reverse engineering of defunct protocols, focusing on Sony's Dynamic Network Authentication. Learn techniques for packet analysis, cryptography, and overcoming challenges in reviving obsolete online systems.
Demystifying Zero Trust - DefCamp - 2021
Explore Zero Trust security: its principles, implementation, and impact on cybersecurity. Learn about identity governance, least privilege, and maturity models for effective protection against modern threats.