Atomic Red Team Hands-on Getting Started Guide
Hands-on guide for implementing Atomic Red Team, covering setup, execution, and best practices for effective cybersecurity testing and threat emulation.
Cache Me If You Can - Messing with Web Caching
Explore web caching vulnerabilities and attacks, including Edge Side Include Injection, with insights from a seasoned security consultant and CTF participant.
Pentesting - Lessons from Star Wars
Explore threat modeling through Star Wars, gaining practical insights for effective offensive and defensive security strategies in software development.
Stupid Pentester Tricks
Discover creative hacking techniques to overcome pentesting challenges. Learn RFID cloning, universal access cards, key theft methods, and advanced phishing strategies for unconventional target compromise.
Mainframe Hacking in 2019
Explore mainframe hacking techniques with expert Philip Young, covering security vulnerabilities, testing tools, and strategies to enhance mainframe protection in modern environments.
xRAT - Monitoring Chinese Interests Abroad With Mobile Surveillance-ware
Explore mobile surveillance-ware xRAT, used for monitoring Chinese interests abroad. Learn about threat detection, reverse engineering, and emerging mobile security challenges.
Penetration Testers versus Initial Access Brokers - Helping the Good Guys Win
Explore the battle between penetration testers and initial access brokers, gaining insights to strengthen cybersecurity defenses and protect against evolving threats.
Penetration Testing Management - Problems in Large Corporations
Explore challenges and solutions in managing penetration testing for large corporations, focusing on effective strategies to enhance cybersecurity and address complex organizational issues.
Teaching Old Shellcode New Tricks
Explore advanced techniques to bypass security measures and enhance Metasploit x86 shellcode, incorporating automation for improved effectiveness in various deployment scenarios.
Security Alarm System - Feeling of Security or Cause for Alarm
Explore vulnerabilities in home security alarm systems, including PIN code sniffing, keypad emulation, and RF attacks. Learn about firmware reverse engineering and its implications for system security.
Attacking & Securing Healthcare Standards & Hospital Secured Systems
Explore HL7 and DICOM healthcare standards, their implementation, security risks, and attack methods. Learn to test workflows, penetrate hardened medical systems, and implement proper defenses against cyber-attacks.
Guide on Setting Up IoT Testing Lab
Learn to set up an IoT testing lab with affordable tools, debunk common misconceptions, and gain insights into IoT pentesting from an experienced security researcher.
Antivirus Evasion Reconstructed - Veil 3.0
Explore Veil Framework's evolution in antivirus evasion, including new features like Python 3 support and targeted malware creation through environmental variables. Learn about the tool's restructure and latest developments.
Case Study of SS7 - Sigtran Assessment
Explore SS7/SIGTRAN penetration testing methodology, common vulnerabilities, attack methods, and preventive measures. Gain insights into telecom security challenges and a real-world case study.
Bug Bounty Reports - How Do They Work
Learn to create effective bug bounty reports for quicker responses, better relationships with security teams, and higher bounties. Gain insights from Adam Bacchus's experience at HackerOne, Snapchat, and Google.
Nearly Generic Fuzzing of XML Based Formats
Explore advanced XML fuzzing techniques and a new tool for mutating XML documents, with insights from an experienced penetration tester on finding security vulnerabilities in various formats.
Building Custom Scans for Real World Enterprise Network
Explore techniques for developing tailored network scans to enhance security in large-scale enterprise environments. Learn practical strategies for identifying vulnerabilities and strengthening defenses.
Hacking Tizen - The OS of Everything
Explore Tizen OS security vulnerabilities, architecture, and application pentesting. Compare with Android and learn about issues like WebKit2 flaws, buffer overflows, and SSL certificate injection.
Pentesting Without Pentesters
Innovative scanning technology enables functional test cases to produce security findings, bridging the gap between development and security testing without dedicated pentesters.
Jailbreak Part 2
Explore advanced techniques and strategies for jailbreaking iOS devices, focusing on vulnerabilities and exploits in mobile operating systems.
SamuraiSTFU - Smartgrid Testing Framework for Utilities
Specialized Linux distribution for electric utility security testing, featuring tools for network, web, embedded, and RF testing, plus energy sector emulators and documentation.