Mapping the Wireless IoT
Explore wireless IoT security challenges, signal identification techniques, and best practices for revealing unknown signals. Includes a demo of a new tool for mapping radio spectrum and identifying devices.
A New CVE-2015-0057 Exploit Technology
Explores CVE-2015-0057 vulnerability, User Mode Callback mechanism, and new exploit techniques in Windows kernel. Analyzes exploit methodology, vulnerability detection, and implications for system security.
Even The LastPass Will Be Stolen, Deal With It!
Uncover vulnerabilities in LastPass password manager, including methods to steal master passwords, bypass 2FA, and access encrypted vaults, highlighting the importance of robust security measures.
Untangling the DOM for More Easy-Juicy Bugs
Explore dynamic JavaScript analysis with Hookish!, an open-source Chrome extension for penetration testing. Learn to uncover DOM-based vulnerabilities and enhance web app security assessments.
The Kali Linux Dojo Workshop - Kali USB Setups With Persistent Stores And LUKS Nuke Support
Learn to set up Kali Linux on USB with persistent storage and LUKS Nuke support. Explore live boot options, create persistence files, and handle emergency situations for secure, portable penetration testing.
Bypass Surgery - Abusing Content Delivery Networks
Exploring vulnerabilities in CDNs, this talk reveals attack patterns against high-availability websites, demonstrating potential risks and exploit development with far-reaching consequences.
Advanced Windows NT - 2K Security
Explore advanced Windows NT/2K security, including payloads, buffer overflows, and kernel mode injection techniques for enhanced system protection.
Getting Rooted and Never Knowing It
Explore advanced hacking techniques and stealthy rootkit deployment methods to understand and defend against sophisticated cyber threats.
Terminal Server
Explore Terminal Server vulnerabilities and security implications in Windows environments. Learn advanced techniques for penetration testing and risk mitigation.
IKE-Test
Explore IKE-Test techniques and methodologies in this comprehensive presentation from Black Hat USA 2004, offering insights into network security and vulnerability assessment.
When the Tables Turn
Explore cybersecurity tactics and strategies as experts discuss defensive techniques, threat analysis, and emerging trends in information security at this Black Hat conference session.
Pentest Story Time - My Favorite Hacks From the Past Year
Engaging tales of successful penetration testing, showcasing diverse attack vectors and vulnerabilities. Highlights include exploiting lack of MFA, IPv6 abuse, and overcoming robust security measures.
The Pentester Blueprint - A Guide to Becoming a Pentester
Comprehensive guide to becoming a pentester, covering essential skills, knowledge, and steps for pursuing a career in ethical hacking, based on expert experience and mentorship.
WAF Bypass In Depth
Explore advanced techniques for bypassing Web Application Firewalls (WAFs) and demonstrating the impact of cross-site scripting vulnerabilities, even in the presence of sophisticated security measures.
Hacking .NET C# Applications - The Black Arts
Explore advanced techniques for attacking .NET applications, including creating cracks and malware. Learn about common protections and counter-protection methods for enhanced penetration testing skills.
Outlook and Exchange for the Bad Guys - Nick Landers
Explore Outlook and Exchange vulnerabilities, focusing on reconnaissance, credential collection, and rule exploitation. Learn about security challenges and practical use cases.
The Emerging Product Security Leader Discipline
Explore product security leadership, covering defense strategies, DevOps integration, threat modeling, and real-world examples. Learn to leverage risks, implement security practices, and adapt to emerging technologies.
Adding Simulated Users to Your Pentesting Lab with PowerShell
Learn to enhance your pentesting lab by creating realistic simulated users using PowerShell, improving the authenticity and effectiveness of your security testing environment.
Forgotten Gems - Old Security Holes Which Companies Still Miss
Explore forgotten security vulnerabilities often overlooked by companies, covering email security, authentication, and configuration issues in popular platforms like Gmail and Outlook.
AntiFreeze Hamburger10 Spanking the Monkey or How Pentesters Can Do It Better
Explore advanced pentesting techniques and strategies to enhance your cybersecurity skills and improve your effectiveness in identifying vulnerabilities and securing systems.
Break Me07 Phishing - Going from Recon to Creds
Comprehensive guide to phishing attacks: from initial reconnaissance to obtaining credentials, presented by cybersecurity experts Adam Compton and Eric Gershman at DerbyCon 2015.