What Do We Learn When We Scan the Internet Every Hour?
Explore Internet ephemerality through hourly scans, revealing insights on service stability across ports, protocols, and ASNs. Implications for research and future scanning methodologies discussed.
LO Level Shells - Weaponizing Ethernet for Evasion and Extended Communication
Weaponizing Ethernet frames for stealthy communication, bypassing common detections and extending layer 2 range limitations. Explore innovative data encoding techniques on the Data Link Layer.
CVE Hunting: Wi-Fi Routers, OSINT and The Tyranny of the Default
Explore CVE hunting techniques for Wi-Fi routers, focusing on default credential vulnerabilities and OSINT strategies to uncover critical security flaws across manufacturers.
The Dark Side of TheMoon - Uncovering Botnets and Criminal Proxy Networks
Uncover the resurrection of "TheMoon" botnet and its connection to "Faceless," a growing criminal proxy network. Learn about botnet mechanics, proxy dangers, and router vulnerabilities.
Chinese APT - Exploiting Edge Devices for Surveillance and Attacks
Revelación de ataques de APT chinos a dispositivos de borde, incluyendo un 0-day en routers de vigilancia. Se analizan casos de estudio y se proponen estrategias de mitigación.
DoH Deception: Evading ML-Based Tunnel Detection with Black-Box Attack Techniques
Explore vulnerabilities in ML models for DoH tunnel detection, demonstrating successful evasion techniques and highlighting critical features to avoid in model development.
Penetration Testing Experience - How to Get It and Advance Your Career
Discover strategies to gain and showcase pentesting experience, essential for landing your dream role in cybersecurity. Learn from industry expert Phillip Wylie on building a successful career path.
Operation So-seki: Investigating Pro-Russian Hacktivist DDoS Attacks
Investigación detallada sobre un grupo hacktivist pro-ruso, sus ataques DDoS y tácticas. Análisis de infraestructura, herramientas y contramedidas basado en el seguimiento de más de 1000 ataques durante un año.
One Port to Serve Them All - Google GCP Cloud Shell Abuse
Uncovers security vulnerabilities in GCP Cloud Shell, demonstrating how attackers can exploit a public-facing port to access internal services and bypass authentication, potentially leading to data leaks and network attacks.
Defending Critical Infrastructure: Deep Enumeration and Proprietary Protocol Analysis
Explore deep enumeration and proprietary protocol analysis to enhance critical infrastructure security. Learn methodologies for dissecting protocols and understanding their potential vulnerabilities and defensive applications.
Lab 01: Setting up pfSense
Configure and deploy pfSense firewall, exploring its features for network security and management. Hands-on experience with a powerful open-source firewall solution.
Complexity Kills - Examining IT Security Challenges in Healthcare Facilities
Explore IT security complexities in healthcare facilities, examining challenges and potential solutions for safeguarding critical medical systems and patient data.
Breaking Barriers and Boundaries in IT Security - TROOPERS24
Explore cutting-edge IT security insights with experts Alexander Heinrich and Jiska Classen at TROOPERS24 conference, focusing on breaking barriers and pushing boundaries in cybersecurity.
Relay Your Heart Away - An OPSEC-Conscious Approach to 445 Takeover
Explore OPSEC-conscious techniques for 445 takeover in this IT security talk, focusing on relay attacks and innovative approaches to network penetration.
Analyzing Malicious Network Traffic with Suricata - Malware Mondays Episode 06
Learn to analyze malicious network traffic using Suricata in REMnux. Explore alert generation, protocol dissection, file identification, and contextual flow information for effective threat detection.
Tales from Incident Response - Unmasking the Threat Actor's Inner Sanctum
Unmasking threat actors' inner workings through incident response tales. Gain insights into cybersecurity challenges and strategies from a principal advisor's real-world experiences at a major hacking conference.
War Stories from the SOC - Cybersecurity Incident Response Lessons
Cybersecurity expert shares real-world experiences from Security Operations Center, offering insights into threat detection, incident response, and best practices for defending against cyber attacks.
The Double-Edged Sword of AI in Cybersecurity
Explore AI's dual impact on cybersecurity: enhancing defenses while posing new threats. Gain insights from expert Alexander Benoit on navigating this complex landscape in the digital age.
Surviving Cyber Attacks - 2024 Edition
Explore cutting-edge strategies for surviving cyber attacks in 2024, presented by Tudor Damian at DefCamp Cluj-Napoca. Learn from industry experts and stay ahead of evolving threats.
Stage 1 C2 in 3 Days - DefCamp Cluj-Napoca 2024
Explore rapid C2 infrastructure setup for penetration testing in this DefCamp presentation. Learn efficient techniques for Stage 1 Command and Control deployment within tight timeframes.
Hacking At Scale - Strategies and Automation
Estrategias y automatización para hacking a gran escala: técnicas avanzadas de penetración presentadas por un experto en ciberseguridad en una importante conferencia regional.