An Adversary's Approach to Smart Contracts
Explore adversarial approaches to smart contracts with insights on potential vulnerabilities and attack vectors, enhancing your understanding of blockchain security.
Hacking Ethereum-based DApps - Security Vulnerabilities and Protections
Explore Ethereum-based DApps vulnerabilities and security measures. Learn attack techniques and protection strategies for blockchain applications.
Using Cryptanalysis to Speed Up Password Cracking
Explore cryptanalysis techniques to enhance password cracking efficiency, improving security assessment and penetration testing capabilities.
Popping the Penguin - An Introduction to the Principles of Linux Persistence
Explore Linux persistence techniques and principles for maintaining unauthorized access, covering key methods and strategies used by attackers to remain undetected on compromised systems.
The Renaissance of Cyber Physical Offensive Capabilities
Explore the resurgence of cyber-physical offensive capabilities and their implications for modern security landscapes in this insightful presentation by Daniel Kapellmann Zafra.
Scaling Up Offensive Pipelines
Innovative approach to offensive CI/CD pipelines for red and purple team operations, automating weaponization and evasion techniques using Infrastructure as Code and Kubernetes.
Invoke-NoShell
Explore advanced PowerShell techniques for stealthy command execution without spawning new processes, enhancing red team operations and evading detection.
Advanced Process Injection Techniques
Hands-on workshop exploring APT tactics for privilege escalation and persistence. Learn to develop stealthy implants through 7 labs on Windows process injection techniques.
Invoke-DOSfuscation - Techniques for CMD Obfuscation
Explore advanced CMD obfuscation techniques used by threat actors, including string manipulation and encoding methods. Learn to create and detect complex obfuscated payloads using the Invoke-DOSfuscation framework.
Breaking the Glass Sandbox
Discover techniques to find exploitable Linux kernel bugs in sandboxed environments, learn to identify valuable vulnerabilities, and explore methods for both offensive and defensive security.
Antivirus Evasion Reconstructed - Veil 3.0
Explore Veil Framework's evolution in antivirus evasion, including new features like Python 3 support and targeted malware creation through environmental variables. Learn about the tool's restructure and latest developments.
Malware Hunting - Using Python as Attack Weapon
Explore Python-based malware hunting techniques to test endpoint security solutions. Learn to simulate targeted attacks and analyze defensive measures using offensive strategies in a controlled lab environment.
PenTesting vs Red Teaming
Explora las diferencias entre PenTesting y Red Teaming, abordando seguridad ofensiva, ingeniería social y seguridad física. Incluye requisitos, certificaciones y recursos de aprendizaje para ambas disciplinas.
Introduction to ATM Penetration Testing - CyberFinance
Explore ATM penetration testing essentials, including attack methods, security vulnerabilities, and defensive strategies. Gain insights from an experienced cybersecurity consultant on protecting financial institutions.
Ekoparty #UniTalks Chile - Plataformas para el desarrollo de habilidades ofensivas
Exploración de plataformas populares para desarrollar habilidades en ciberseguridad ofensiva, enfocado en principiantes y comunidades de seguridad. Parte de la serie #UniTalks de Ekoparty.
The Unbelievable Insecurity of the Big Data Stack
Explore new attack vectors in Big Data infrastructure layers, addressing the lack of security assessment methodologies and technical resources for this rapidly growing field.
Kernel Pwning with eBPF - A Love Story
Explore eBPF technology, its impact on Linux kernel capabilities, and potential security vulnerabilities. Learn about verifier exploits and achieving code execution in the kernel.
Fetch Exploit - Attacks Against Source Code Downloaders
Explore attacks against source code downloaders and learn techniques to exploit vulnerabilities in fetch mechanisms, enhancing your cybersecurity knowledge.
How to Bring HID Attacks to the Next Level
Exploring advanced HID attack techniques using WHID Injector and P4wnP1, including design insights, feature comparisons, and defensive strategies for Blue Teams to detect and mitigate these sophisticated threats.
An Introduction to Container Hacking
Explora técnicas de hacking en contenedores, abordando vulnerabilidades y mejores prácticas de seguridad en entornos DevSecOps y tecnologías cloud con el experto Rory McCune.
Introducción a SPIFFE y SPIRE - Autenticando servicios nativos de la nube
Descubre SPIFFE y SPIRE para autenticar servicios nativos de la nube en entornos DevSecOps. Aprende mejores prácticas de seguridad defensiva y ofensiva para aplicaciones en la nube con expertos del sector.