Hacking IIS
Explore advanced IIS hacking techniques, including HTTPAPI 2.0 assets, VHost hopping, local file disclosure, and complex XXE vectors. Learn to leverage tools like DNSpy for effective web application security testing.
Just Give Me a Trial, Please
Overcoming obstacles in hacking enterprise software for bug bounty programs: experiences and advice on tackling third-party vendor products and obtaining trial access.
Bug Bounty Platforms - Not Just for Hunting Anymore
Explore the similarities and differences between pentesting and bug bounty hunting, and learn how bug bounty experience can launch a career in pentesting. Gain insights from Phillip Wylie's expertise in cybersecurity.
Launching an InfoSec Career
Explore diverse paths to cybersecurity careers, from CTFs to bug bounties. Learn key strategies for success, including self-teaching, building a unique skill set, and leveraging your online presence as a resume.
Breaking VNC Clients with Evil Servers
Explore VNC client vulnerabilities and learn how malicious servers can exploit them. Gain insights from an award-winning hacker on application security and sustainable DevSecOps practices.
Submitting High Quality Bug Bounty Reports - Tips from Behind the Curtain
Learn insider tips for crafting high-quality bug bounty reports from Roy Davis, an experienced security researcher and manager of Zoom's Bug Bounty program. Gain valuable insights to improve your submissions.
Exploiting Curiosity and Context - How to Make People Click on a Dangerous Link
Explores how curiosity and context influence clicking on dangerous links, analyzing user behavior and reasoning to improve cybersecurity strategies and protection mechanisms.
Understanding HL7 2.X Standards - Pen Testing - and Defending HL7 2.X Messages
Explore HL7 2.X standards in healthcare, learn pen testing techniques for medical systems, and discover strategies to secure HL7 2.X messages against potential vulnerabilities and attacks.
Secure Penetration Testing Operations - Demonstrated Weaknesses in Learning Material and Tools
Explores vulnerabilities in penetration testing practices, demonstrating weaknesses in learning materials and tools. Provides guidance on securing testing procedures and includes a live demonstration of hijacking techniques.
Unleash the Infection Monkey - A Modern Alternative to Pen-Tests
Explore a new open-source tool for testing network security resilience. Learn how the Infection Monkey simulates attacks, uncovers vulnerabilities, and provides a cost-effective alternative to traditional penetration testing methods.
SOHO Hacking at Pwn2Own
Exploring vulnerabilities in home routers and small business devices, detailing methodologies for finding and exploiting security flaws, and demonstrating real-world attack scenarios in SOHO networks.
Advanced Attack Vectors in Azure Environments
Explore privilege escalation techniques in Azure's integrated ecosystem. Learn core concepts and advanced attack vectors for enhanced cloud security awareness.
Are You a PenTexter? - Open-Sourcing Pentest Reporting and Automation
Open-source penetration testing reporting and automation techniques to streamline security assessments and improve efficiency in identifying vulnerabilities and communicating findings.
Gitdigger - Creating Useful Wordlists From Public GitHub Repositories
Learn to create valuable wordlists from GitHub repositories using Gitdigger. Explore techniques for data extraction, processing, and generating outputs for various security applications.
Oops, That Wasn't Supposed to Happen - Bypassing Internet Explorer's Cross Site Scripting Filter
Explore techniques to bypass Internet Explorer's XSS filter, uncovering vulnerabilities and enhancing web security knowledge.
Evading Code Emulation - Writing Ridiculously Obvious Malware That Bypasses AV
Explore techniques for creating malware that evades antivirus detection through code emulation bypassing, presented by Kyle Adams at BSidesLV 2014.
Pentesting with Docker
Learn to leverage Docker for efficient and flexible penetration testing environments, covering architecture, image building, port forwarding, and integrating essential security tools.
Injection on Steroids - Code-less Code Injections and 0-Day Techniques
Explore advanced code injection techniques and zero-day vulnerabilities without writing code. Learn cutting-edge cybersecurity strategies for identifying and exploiting system weaknesses.
Automation of Penetration Testing and the Future
Explore the future of automated penetration testing, its impact on the industry, and strategies for adapting to evolving cybersecurity challenges.
Hacking Megatouch Bartop Games
Explore the intricacies of hacking Megatouch bartop games, uncovering vulnerabilities and potential exploits in these popular entertainment systems.
P4wnP1 A.L.O.A. - Kleine Schweinereien mit dem Raspberry Pi Zero W
Entdecken Sie die Sicherheitslücken von Computern durch kreative Nutzung des Raspberry Pi Zero W. Lernen Sie, wie man unbemerkt Zugriff erlangt und Systeme manipuliert.