Diving into Windows Remote Access Service for Pre-Auth Bugs
Explore unauthenticated remote code execution vulnerabilities in Windows Remote Access Service, focusing on high-impact bugs and their implications for offensive and defensive security research.
MaginotDNS - Attacking the Boundary of DNS Caching Protection
Unveils MaginotDNS, a potent cache poisoning attack exploiting DNS server vulnerabilities. Demonstrates how attackers can compromise entire DNS zones, including top-level domains, surpassing previous attack capabilities.
MoustachedBouncer - AitM-Powered Surveillance via Belarus ISPs
Uncovers advanced espionage group using AitM attacks and ISP-level tampering in Belarus to target diplomats with custom malware, highlighting sophisticated surveillance techniques.
Dismantling DDoS - Lessons in Scaling
Explore global DDoS attack trends, their impact on cybercrime, and insights into future threats through data analysis and geopolitical context.
Securing the Hastily Formed Network - Infosec for Disaster Relief and Emergency Response
Explore security challenges and solutions for emergency response networks, from Hurricane Katrina to the Ebola crisis. Learn how to protect vital connectivity in disaster zones.
Stick a Pin in Certificate Pinning - How to Inspect Mobile Traffic and Stop Data Exfiltration
Learn how certificate pinning in mobile apps can bypass security controls and explore solutions for inspecting encrypted traffic to prevent data exfiltration and attacks.
Long Live The Honey Badger - Robust Asynchronous DPSS and its Applications
Explore robust asynchronous Dynamic-committee Proactive Secret Sharing (DPSS) protocols that handle network churn and faults efficiently, with insights on high-threshold DPSS and batch-amortized schemes.
Snapping Snap Sync - Practical Attacks on Go Ethereum Synchronising Nodes
Practical attacks on Go Ethereum synchronization revealed, allowing adversaries to manipulate blockchain consensus and potentially profit through off-chain trading and code execution on Ethereum forks.
Introduction to Security Onion 2.4
Explore Security Onion 2.4's features and capabilities for network security monitoring, threat hunting, and incident response in this comprehensive overview.
The Curious Case of the Rogue SOAR
Explore vulnerabilities in SOAR tools and their potential for network compromise. Learn about innovative attack vectors targeting security infrastructure and implications for future cybersecurity challenges.
MITM on PSTN - Novel Methods for Intercepting Phone Calls
Explore innovative techniques for intercepting phone calls on PSTN and mobile networks, covering Caller ID spoofing, SS7, call diverts, and social engineering to form a comprehensive attack method.
You Depend on DNS, This Is How It Works and You Won't Believe It
Explore DNS's 40-year evolution, its key features, and surprising facts in this live demo. Discover how this distributed system adapts and survives in modern networks.
State of the Onion 2023 - Security Onion Platform Overview and Future Directions
Explore Security Onion's evolution from 2008 to present, including platform development, company growth, and future directions in threat hunting and enterprise security monitoring.
Common Darknet Weaknesses
Explore common vulnerabilities in darknet networks, focusing on attack strategies and mitigation techniques for encrypted anonymizing systems like Tor and I2P.
Your Perimeter Sucks
Explore network security vulnerabilities and learn strategies to strengthen your perimeter defenses against modern cyber threats and attack vectors.
The Dirty Little Secrets They Didn't Teach You In Pentesting Class
Uncover advanced penetration testing techniques, from domain admin strategies to post-exploitation tactics. Learn covert persistence methods and efficient data discovery for enhanced cybersecurity assessments.
Pentesting Over Powerlines
Explore innovative techniques for penetration testing using powerline networks, uncovering vulnerabilities and enhancing security in unconventional infrastructure.
Collecting Underpants to Win Your Network
Discover strategies for network penetration testing, focusing on information gathering techniques and exploiting vulnerabilities to gain unauthorized access.
Blue Team Is Sexy - Part II - All You Baseline Are Belong to Us
Explore advanced blue team strategies, focusing on baseline security, reevaluating defensive measures, and leveraging tools like Nmap for enhanced protection and threat detection.
Thomas Dotreppe - Mister X - OpenWIPS-NG
Explore OpenWIPS-ng, an open-source wireless intrusion prevention system. Learn its features, implementation, and potential applications in network security.
Your Perimeter Sucks
Explore perimeter security vulnerabilities and learn effective strategies to strengthen your network's defenses against external threats and attacks.