Lack of Self Isolation - Inside a Container Exploit
Explore container vulnerabilities, focusing on lack of self-isolation. Learn about potential exploits, their causes, and solutions for improved container security.
Securing Your Containerized Applications with NGINX
Explore NGINX's role in securing containerized apps as a sidecar reverse proxy, covering TLS, HTTP, authentication, authorization, and traffic control.
Avoiding an Identity Crisis - Authentication with Windows Server Containers
Explore authentication methods for .NET applications in Windows Server containers, covering Active Directory integration, gMSAs, and modern protocols like OAuth for secure identity management.
Open Source Malware Lab
Explore open-source tools for malware analysis, including Cuckoo Sandbox, Thug, Bro Network Security Monitor, and Volatility Framework. Learn to build an automated lab for comprehensive threat assessment.
Breaking Binary Protocols and Bad Crypto
Explore reverse-engineering techniques for binary protocols and cryptography, focusing on methodologies to uncover vulnerabilities in network devices through real-world examples.
Deep Dive on the Dark Web
Explore tools and techniques used by cybercriminals on the dark web, from stolen credit cards to ransomware, and learn proactive defense strategies against various cyber threats.
WiFi-based IMSI Catcher
Explore WiFi-based IMSI catchers, their potential for easier smartphone tracking, and learn about mitigation strategies for vendors, operators, and users to address privacy concerns.
BeyondCorp - Beyond "Fortress" Security
BeyondCorp: A new security model that grants access based on device and user credentials, eliminating the need for traditional VPNs and enabling secure work from any network.
Assessing the Embedded Devices On Your Network
Explore embedded device security challenges, threat modeling, and assessment techniques through a VoIP phone case study. Learn hardware tricks, debugging methods, and potential mitigations for vulnerabilities.
Sweet Security - Deploying a Defensive Raspberry Pi
Explore open-source tools and inexpensive hardware like Raspberry Pi to monitor, protect, and mitigate threats in IoT environments, addressing security challenges of outdated devices.
Fraud Detection and Real-time Trust Decisions
Explore fraud detection techniques in online commerce, from traditional attacks to real-time marketplace challenges. Learn about combating fraud and its parallels with network security.
DNS Attacks - Past, Present, and Future
Explore DNS vulnerabilities, their historical impact, and potential future threats in this comprehensive overview of attack techniques and pentesting applications.
The Metaverse of Vulnerability
Explore the cybersecurity challenges and vulnerabilities in the metaverse, from technical issues to operational risks, and learn proactive strategies to address these concerns.
WiFuzz - Detecting and Exploiting Logical Flaws in the Wi-Fi Cryptographic Handshake
Explore techniques for detecting and exploiting logical vulnerabilities in Wi-Fi cryptographic handshake implementations, focusing on model-based testing and real-world examples.
Evading Microsoft ATA for Active Directory Domination
Explore techniques to bypass Microsoft ATA's threat detection in Active Directory, covering reconnaissance, credential attacks, lateral movement, and persistence methods.
Running a Security Operations Center - Challenges, Solutions and Key Learnings
Explore challenges and solutions in operationalizing a Security Operations Center, covering threat hunting, behavioral analytics, and rapid product deployment for enhanced cybersecurity.
Attacks Against GSMA's M2M Remote Provisioning
Explore vulnerabilities in GSMA's eUICC remote provisioning, revealing potential attacks that could disrupt mobile network operators' service delivery. Learn about SIM evolution and security implications.
CALDERA - Automating Adversary Emulation
Automate adversary emulation for network security using CALDERA. Replicate realistic post-compromise techniques, leveraging benign system functionality to enhance defensive strategies.
Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices
Discover critical Wi-Fi security vulnerabilities affecting billions of devices, including Amazon Echo. Learn about Kr00k, its impact, and see a live demonstration of the exploit.
Wi-Fi Brokering
Explore Wi-Fi network vulnerabilities and advanced attack techniques, focusing on 802.1X networks and PEAP authentication methods. Learn about relaying challenges and responses for unauthorized access.
Spectra - Breaking Separation Between Wireless Chips
Explore wireless spectrum sharing challenges, coexistence mechanisms, and potential vulnerabilities in Wi-Fi and Bluetooth chips, with focus on smartphone security implications.