Setting Up BackTrack and Automating Tasks with Bash Scripts
Learn to set up BackTrack and automate tasks using bash scripts, enhancing your cybersecurity toolkit and improving efficiency in penetration testing workflows.
Popping the Penguin - An Introduction to the Principles of Linux Persistence
Explore Linux persistence techniques and principles for maintaining unauthorized access, covering key methods and strategies used by attackers to remain undetected on compromised systems.
Making MongoDB Cry: Automated NoSQL Exploitation with NoSQLMap - Bsides Nashville 2014
Explore automated NoSQL exploitation techniques using NoSQLMap, focusing on MongoDB vulnerabilities and security risks in NoSQL databases.
Think Differently About Database Hacking - Lecture 136
Explore innovative approaches to database hacking, challenging conventional methods and uncovering new vulnerabilities in database systems.
Authorization in Software - How Box Does Authorization
Explore Box's multi-layered approach to authorization, covering security challenges, user permissions, and API access in file-sharing and collaboration platforms.
Exploiting the Top Ten Database Vulnerabilities and Misconfigurations - BSidesRI 2013
Explore top database vulnerabilities and misconfigurations, learning how to identify and exploit them for improved security awareness and defense strategies.
Hacking Istio: The Good, the Bad, and the Misconfigured
Explore Istio's network security tools, learn to identify and exploit vulnerabilities in misconfigurations, and understand the importance of proper security policy setup in service mesh environments.
Kubernetes Privilege Escalation Tactics - Understanding and Mitigating Vulnerabilities
Explore Kubernetes vulnerabilities, privilege escalation tactics, and mitigation strategies. Learn to secure clusters against insider threats and external attacks through hands-on demonstrations and best practices.
Backdooring MS Office Documents with Secret Master Keys
Explore techniques for backdooring MS Office documents using secret master keys, uncovering potential vulnerabilities and security risks in widely-used productivity software.
Attacking Storage Services - The Lynchpin of Cloud Services
Explore cloud storage vulnerabilities and attack techniques, focusing on enumeration, identification, exploitation, and post-exploitation strategies for various cloud services.
Attack Scenarios Abusing Azure Active Directory
Explore Azure AD security vulnerabilities, privilege escalation techniques, and mitigation strategies. Learn to protect your organization's cloud infrastructure from potential attacks and misconfigurations.
Is Attestation All We Need? Fooling Apple's AppAttest API
Exploración detallada de la API AppAttest de Apple, sus vulnerabilidades y limitaciones como solución anti-manipulación, con ejemplos de implementaciones débiles y escenarios de bypass.
Matriux Leandros - An Open Source Penetration Testing and Forensic Distribution
Explore Matriux Leandros, an open-source distribution for penetration testing and digital forensics. Learn its features, applications, and advantages for cybersecurity professionals and enthusiasts.
Pacu - Attack and Post-Exploitation in AWS
Explore AWS attack and post-exploitation techniques using Pacu, an open-source tool for penetration testing and security assessments in cloud environments.
Hillbilly Storytime - Pentest Fails
Entertaining tales of penetration testing mishaps and lessons learned, offering valuable insights for cybersecurity professionals and aspiring ethical hackers.
Give the Dog a Bone - Exploring OSINT Capabilities of Pen-testing Tools
Explore OSINT capabilities of pen-testing tools, focusing on security awareness, cloud migration, and new attack strategies. Learn about DNS, AWS logs, Nmap, and honeypots.
Breaking the Bodyguards
Explore techniques for bypassing security measures and penetrating systems, focusing on practical strategies and real-world applications in cybersecurity.
Applied OSINT - Enabling Better Social Engineering for Better Pen Tests
Explore OSINT techniques to enhance social engineering in penetration testing. Learn about Facebook Live, heat maps, password dumps, and persuasion principles for more effective assessments.
Watching the Watchers - Exploiting Vulnerable Monitoring Solutions
Explore vulnerabilities in monitoring solutions and learn techniques to exploit them, enhancing your cybersecurity skills and understanding of potential risks in surveillance systems.
ATGP - Wi-Door - Blind/Reverse Shells for Your Wi-Fi
Explore advanced Wi-Fi hacking techniques, including blind and reverse shells, to enhance network security awareness and penetration testing skills.
CTF or WTF?
Compara desafíos CTF con pruebas de penetración reales, explorando similitudes y diferencias en habilidades, escenarios y lecciones aprendidas para profesionales de ciberseguridad.