The Little Phone That Could Ch-ch-chroot
Explore cost-effective Red Team tactics using a covert disposable phone for reconnaissance, including device rooting, functionality, and anti-forensics techniques.
DNS Attacks - Past, Present, and Future
Explore DNS vulnerabilities, their historical impact, and potential future threats in this comprehensive overview of attack techniques and pentesting applications.
Fantastic Red-Team Attacks and How to Find Them
Explore prevalent gaps in organizational defenses through Atomic Red Team testing. Learn to identify and analyze complex attack patterns using Event Query Language and data analysis techniques.
A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages
Explore a new SSRF exploit technique targeting URL parsers in popular programming languages. Learn about protocol smuggling, fuzzing tools, and discover vulnerabilities in widely-used libraries.
Adventures in the Underland - The CQForensic Toolkit as a Unique Weapon Against Hackers
Explore CQTools, a powerful toolkit for penetration testing, featuring unique discoveries by CQURE Team. Learn practical applications in cybersecurity projects and forensic analysis.
CQTools - The New Ultimate Hacking Toolkit
Explore top 39 hacking tools in CQTools, including 5 new ones for privilege elevation and network attacks. Learn techniques for hash extraction, impersonation, and decryption.
Cyber Resilience - Say What?
Explore cyber resilience strategies, implementation methods, and actionable steps to enhance organizational security through existing programs and meaningful metrics.
Pen-Testing the Supply Chain
Explore software supply chain risks through enhanced security testing and adversary simulation. Learn to identify vulnerabilities, assess vendor risks, and implement effective security measures.
Post-Exploitation of Cloud Service Providers
Explore AWS post-exploitation techniques, including cloud-wide credential theft and backdooring compromised accounts, to enhance penetration testing skills for cloud environments.
Insecurity of Smart Energy Meters - A Hardware Security Perspective
Explore hardware security vulnerabilities in smart energy meters, covering threat classifications, current trends, and testing methodologies for advanced metering infrastructure and grid security.
Hacking Identity - A Pen Tester's Guide to IAM
Learn pen testing techniques for Identity and Access Management systems, covering intelligence gathering, attack vectors, and security challenges in IAM implementations.
Using Atomic Red Team to Test Endpoint Solutions
Explore endpoint security testing using Atomic Red Team, covering detection lifecycles, chain reactions, and APT simulations for improved defense strategies.
Advanced Social Engineering and OSINT for Penetration Testing
Learn advanced social engineering and open-source intelligence techniques for penetration testing, including practical examples, applications, and mitigation strategies to enhance cybersecurity skills.
Red Team Apocalypse - Beau Bullock and Derek Banks
Explore advanced red team techniques, including calendar injection, email capture, and domain fronting. Learn stealthy enumeration methods and strategies for improving system security.
Pen Test War Stories - Why My Job Is So Easy and How You Can Make It Harder
Discover common penetration testing vulnerabilities and learn effective remediation strategies to enhance your organization's cybersecurity posture.
Modern Evasion Techniques
Explore modern evasion techniques for cybersecurity, including Metasploit tips, email controls, Apache ModRewrite, and PowerShell, with practical demonstrations and expert insights.
Testing Endpoint Protection - How Anyone Can Bypass Next Gen AV
Explore techniques to bypass next-generation antivirus software, learn about testing methodologies, and understand the effectiveness of endpoint protection solutions.
Bash Can Get Uglier - Using Bashfuscator to Generate Bash Obfuscation
Explore advanced Bash obfuscation techniques using Bashfuscator, from basic methods to complex strategies like subshells and parameter expansions, enhancing your scripting skills.
Attacking Azure Environments with PowerShell
Learn to exploit Azure environments using PowerShell, covering data dumping, modules, and various services. Gain insights into escalation techniques and practical demonstrations.
A Journey of Payload Delivery
Explore innovative payload delivery techniques, focusing on evasion, encryption, and minimizing attribution. Learn about Firefox Send, Web Crypto API, and weaponizing file-sharing services.
Retail Store POS Penetration Testing
Explore POS system vulnerabilities, security controls, and network testing techniques for retail environments. Learn effective recommendations to enhance POS security.