reNgine - An Automated Reconnaissance Framework
Explore an automated reconnaissance framework for efficient cybersecurity assessments, enhancing vulnerability detection and streamlining security workflows.
How to Rob a Bank - Modern Hacking Techniques and Security Defenses
Practical demonstration of modern hacking techniques and defense strategies through a simulated bank robbery, offering insights into targeted attacks and organizational preparedness.
Malicious Use of Microsoft Local Administrator Password Solution
Exploiting vulnerabilities in Microsoft's LAPS to gain unauthorized access to local administrator credentials and maintain presence on compromised systems in post-exploitation scenarios.
Exploring Internet Services - Exposing Vulnerabilities and Misconfiguration at Scale
Discover techniques for identifying and exposing vulnerabilities in internet services at scale, enhancing cybersecurity knowledge and skills for large-scale systems.
Exploiting Group Policy Objects for Persistence and Lateral Movement
Explore how Group Policy Objects can be exploited for malware distribution and network persistence. Learn about PowershellEmpire modules and countermeasures for enhanced cybersecurity in enterprise environments.
Hacking the OWASP Juice Shop
Explore web application security through hands-on hacking of a deliberately insecure e-commerce site, learning about OWASP Top 10 vulnerabilities and ethical hacking techniques.
Web Application Firewall - Functionality and Bypass Techniques
Explore web application firewalls, their functionality, and techniques to bypass them in this insightful presentation by security expert Aatif Khan.
Offensive Security 101
Learn essential offensive security techniques and strategies to protect systems from cyber threats and vulnerabilities.
The Path Towards Automated Heap Exploitation
Explore automated heap exploitation techniques and strategies for enhancing cybersecurity defenses in this insightful conference talk by Thaís Moreira Hamasaki.
CTF Overview and Experience - Preparing for SecurityCon
Prepare for SecurityCon's CTF event with a warm-up session covering container breakouts and Kubernetes misconfigurations. Suitable for all experience levels, learn CTF engagement techniques.
Penetration Testing Experience and How to Get It
Discover strategies for gaining and showcasing penetration testing experience to launch your career in this field, presented by Phillip Wylie, coauthor of The Pentester Blueprint.
Could Passwordless Authentication Be Worse Than Passwords?
Explore vulnerabilities in passwordless authentication, revealing how faulty implementations can lead to greater security breaches than traditional passwords. Learn best practices for developers, pentesters, and users.
IoT and OT Firmware Security Analysis with EMBA - From Firmware to Exploit
Automated firmware analysis for IoT and OT devices using EMBA, an open-source tool that detects vulnerabilities, identifies exploits, and supports penetration testing of embedded systems.
The Attacker's Guide to Exploiting Secrets in the Universe
Explore methods to discover and exploit secrets in git repositories, containers, and compiled apps. Learn about vulnerabilities in API keys and credentials across various environments.
How I Became a Hacker and What I'd Do Differently
Insights into a hacker's journey, offering valuable lessons and advice for aspiring cybersecurity professionals. Learn from real-world experiences to accelerate your path in ethical hacking.
Ethical Hacking: Good Intentions and Questionable Outcomes
Explore ethical boundaries in security testing, from fuzzing servers to buying dark web credentials. Discuss grey areas and the need for beneficial practices that maintain moral high ground.
Inside the Mind of a Hacker 2023 - Bugcrowd Webinar
Explore hacker insights, AI's impact on cybersecurity, and industry trends with experts. Gain valuable perspectives on ethical hacking, motivations, and the evolving landscape of security research.
How NTLM Relay Ruins Your Exchange Servers
Uncovers a critical NTLM relay attack surface in Exchange Server, affecting mailbox security and potentially leading to RCE. Explores vulnerabilities, exploits, patches, and protection strategies for Exchange environments.
Analyzing and Reverse Engineering Antivirus Signatures
Explore antivirus signature analysis and reverse engineering, gaining insights into detection evasion techniques and evaluating Microsoft Defender's effectiveness for improved cybersecurity strategies.
Waiting for Creds - The Life of a Penetration Tester
Explore the life of a penetration tester, including career prospects, industry trends, and essential skills. Gain insights from a principal security consultant's experiences in application security and cryptography.
Pwning IoT Devices Through Their Applications - From AppSec to IoT Security
Explore IoT device vulnerabilities through application security techniques, from firmware analysis to code review, leading to six new CVEs and insights on responsible disclosure.