Ethical Hacking in 15 Hours - 2023 Edition - Learn to Hack
Comprehensive ethical hacking training covering advanced techniques like subdomain hunting, vulnerability scanning, exploitation, and buffer overflows. Includes hands-on practice with multiple virtual machines.
Web App Testing - Enumeration
Learn web app enumeration techniques including subdomain discovery, vulnerability scanning, and using tools like Burp Suite and Nikto to identify potential security weaknesses.
Ekoparty Summer Workshops 2021 - Active Directory: Post Exploitation Attacks
Aprende técnicas avanzadas de post-explotación en Active Directory, incluyendo elevación de privilegios y ataques como Password Spraying y Kerberoasting, para comprometer entornos corporativos.
Cracking Active Directory Passwords and MFA Fatigue
Explore techniques for cracking Active Directory passwords and exploiting MFA fatigue vulnerabilities. Learn to strengthen organizational security through robust password policies and MFA implementation.
Winning the Game of Active Directory - Securing Against Common Attack Strategies
Master essential Active Directory security strategies, from common attack vectors to implementing robust defensive measures for protecting enterprise environments and preventing network compromises.
Fun with LDAP and Kerberos - Attacking AD from Non-Windows Machines
Explore Active Directory attacks from non-Windows systems using LDAP and Kerberos. Learn techniques for reconnaissance, password spraying, and ticket forging to enhance your penetration testing skills.
Pen Test War Stories - Why My Job Is So Easy and How You Can Make It Harder
Discover common penetration testing vulnerabilities and learn effective remediation strategies to enhance your organization's cybersecurity posture.
I Simulate Therefore I Catch - Enhancing Detection Engineering with Adversary Simulation
Enhance detection engineering skills through adversary simulation techniques, focusing on prevention controls, resilience validation, and automated simulation for improved cybersecurity.
CrackMapExec Owning Active Directory by Using Active Directory
Explore Active Directory exploitation using CrackMapExec. Learn libraries, authentication, payload modules, and execution techniques for effective penetration testing and security assessment.
Attacking and Defending the Microsoft Cloud - Office 365 & Azure AD
Explore common attacks on Microsoft Cloud, learn effective defenses, and gain insights into securing Office 365 and Azure AD environments. Applicable to other cloud providers.
Stealing Domain Admin or How I Learned to Stop Worrying and Love the CSSF
Explore techniques for compromising domain admin privileges, including social engineering, password spraying, and hash attacks. Learn defensive strategies and the importance of system hardening.
Hacking Identity - A Pen Tester's Guide to IAM - Jerod Brennen
Comprehensive guide to identity and access management security, covering attack surfaces, pen testing processes, and best practices for securing user lifecycles and admin privileges.
Hacking Identity - A Pen Tester's Guide to IAM
Explore identity and access management vulnerabilities through a pen tester's perspective. Learn OSINT, password spraying, social engineering, and strategies to enhance IAM security.