Mantra OS - Because the World is Cruel
Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and risk mitigation strategies.
Integrating Mobile Devices into Your Penetration Testing Program - DefCamp 2015
Explore integrating mobile devices into penetration testing programs, covering security risks, attack vectors, and defensive strategies for corporate and personal devices.
PuttyRider - Pivoting from Windows to Linux in a Penetration Test - DefCamp - 2014
Explore pivoting techniques from Windows to Linux in penetration testing using PuttyRider. Learn session hijacking, architecture, and functions through a practical demonstration.
Why Usual Pentests Suck - DefCamp - 2019
Explore common pentesting pitfalls and innovative approaches to enhance security assessments. Learn strategies to overcome limitations and conduct more effective penetration tests.
Adversary Emulation on Windows - DefCamp - 2021
Explore advanced adversary emulation techniques for Windows systems, focusing on penetration testing, red teaming, and the MITRE framework to enhance cybersecurity defenses.
Offensive and Defensive Sides of Cloud Security - DefCamp - 2021
Explore offensive and defensive cloud security strategies, including risks, audits, penetration testing, and real-world attack scenarios in this comprehensive DefCamp presentation.
Implementing Continuous Offense to Measure and Monitor Cybersecurity Defenses - DefCamp - 2019
Explore continuous offense techniques to assess and enhance cybersecurity defenses. Learn about breach simulation tools, vulnerability assessment, and practical strategies for improving network security.
Penetration Testing of Vehicle Components - DefCamp - 2019
Explore vehicle component penetration testing, focusing on ECUs and FMS. Learn about CAN networks, OBD2 ports, and various hacking tools and techniques for automotive security.
Red Team Engagements and the Forgotten Risk of Mobile Devices - DefCamp - 2019
Explore red team engagements and mobile device risks in cybersecurity. Learn about mobile app vulnerabilities, penetration testing tools, and offensive instrumentation techniques for enhanced security awareness.
Well, That Escalated Quickly! A Penetration Tester’s Approach to Privilege Escalation - DefCamp - 2018
Explore penetration testing techniques for privilege escalation, covering Windows systems, services, and common vulnerabilities. Learn practical approaches to identify and exploit security weaknesses.
Web Application Firewall Bypassing - DefCamp - 2016
Aprende técnicas avanzadas para evadir firewalls de aplicaciones web, incluyendo métodos de reconocimiento, explotación de discrepancias y bypass de reglas para pruebas de penetración efectivas.
Credential Assessment - Mapping Privilege Escalation at Scale
Explore privilege escalation techniques in large-scale breaches and learn how to identify and combat credential exposure using a comprehensive framework for both offensive and defensive purposes.
The Metabrik Platform - Rapid Development of Reusable Security Tools
Explore the Metabrik Platform for rapid security tool development. Learn to create reusable components, improve existing tools, and solve complex security challenges efficiently.
Fun with LDAP and Kerberos - Attacking AD from Non-Windows Machines
Explore Active Directory attacks from non-Windows systems using LDAP and Kerberos. Learn techniques for reconnaissance, password spraying, and ticket forging to enhance your penetration testing skills.
Abusing Bash for Windows
Explore techniques for exploiting Bash on Windows, including remote shells, password extraction, and AppLocker bypasses. Learn about security implications and forensic considerations.
Reversing Client Side JavaScript Using the Chrome Dev Tools Protocol
Explore Chrome Dev Tools protocol for JavaScript reversal, bug finding, and vulnerability detection. Learn to modify web app behavior and automate pentesting tasks using Go-based plugins.
Social Engineering for Penetration Testers
Explore social engineering techniques, their evolution, and practical applications in penetration testing. Learn from real-world examples and scenarios to enhance your security assessment skills.
Uncovering SAP Vulnerabilities - Dissecting and Breaking the Diag Protocol
Dissecting SAP Diag protocol to uncover vulnerabilities, explore attack vectors, and enhance security in SAP Netweaver systems through novel tools and techniques for protocol analysis and exploitation.
Introducing the Smartphone Penetration Testing Framework
Comprehensive framework for assessing smartphone security in organizations, covering various attack vectors and providing tools for penetration testing across multiple platforms.
Extracting All the Azure Passwords - Karl Fosaaen - Ekoparty 2021: Red Zone Space
Explore Azure password extraction techniques, automate credential access, and learn about critical Azure permission issues in this comprehensive security talk.
Breaking the Security Barrier of a Major Infusion Pump - Douglas McKee & Philippe Laulheret - Ekoparty 2021
Explore the process of remotely compromising a widely-used hospital infusion pump, including firmware analysis, vulnerability research, and exploitation demonstrations.