Penetration Testing in the Cloud
Exploring challenges and methods for secure cloud penetration testing, including targeted approaches using Docker instances and internal network interfaces for ethical hacking.
Unwrapping the Unknown Past
Inspirational talk by a young tech prodigy on achieving goals through determination, showcasing his journey in AI, robotics, and ancient script translation without formal mentorship.
Security Audits as an Integral Part of PHP App Development
Learn to integrate security audits into PHP application development, uncovering vulnerabilities and enhancing overall software security through expert insights and practical implementation strategies.
Abusing Azure Active Directory - From MFA Bypass to Listing Global Administrators
Explore Azure AD vulnerabilities, including MFA bypass and global admin listing, to understand potential security risks in this widely-used identity management solution.
Royal Testing - Purple Teaming to Build & Secure Applications Better
Explore purple teaming for better application security. Learn to understand flaws, attacks, and defense strategies. Gain insights on effective monitoring and testing techniques.
Instrument Flight Rules - Navigating Cyber Security in a Cloud Landscape
Explore modern cybersecurity challenges in cloud environments, learn strategies for data protection beyond traditional perimeters, and discover tools designed for cloud security in this insightful presentation.
Breaking Out of Restricted RDP
Explore techniques for escaping restricted Remote Desktop Protocol environments, enhancing your cybersecurity skills and understanding of system vulnerabilities.
POSIX Meterpreter
Learn about POSIX Meterpreter in less than an hour with Ekoparty Security Conference. Seguinos en nuestras redes sociales.
Fuzzing - Finding Your Own Bugs and 0days
Aprenda a criar e usar um fuzzer para encontrar bugs e vulnerabilidades, incluindo técnicas para escrever exploits e obter acesso a sistemas. Demonstrações práticas incluídas.
Inside the Mind of a Threat Actor - Beyond Pentesting
Explore the distinctions between pentesting and red teaming, delving into tools, techniques, and career paths. Gain insights on becoming a red team operator and valuable resources for professional growth.
The Best Laid Schemes - Attacking URL Schemes
Exploring URL scheme vulnerabilities in web exploits, including SSRF and XXE attacks. Analyzes browser-specific attack surfaces and introduces a new Firefox 0day for arbitrary code execution.
Runtime Memory Analysis Tool for Mobile Apps
Runtime memory analysis tool for mobile apps, automating common checks during penetration testing. Simplifies reverse engineering of obfuscated code for iOS and Android, tracking app behavior changes in real-time.
Car Hacking Virtual Lab
Explore vehicle architecture, CANbus protocol, CAN frames, and car hacking tools in this hands-on virtual lab. Learn from experts in automotive security and gain practical skills in vehicle system penetration testing.
EOS - Hackers New Bank
Exploración de ataques y vulnerabilidades en la blockchain EOS, incluyendo casos de estudio de pérdidas millonarias y análisis de CVEs específicos por un experto en seguridad de blockchain.
iNalyzer - No More Blackbox iOS Analysis
Discover iNalyzer, an open-source framework for iOS app security assessment. Learn how it transforms the app into a testing tool, enabling efficient server-side attacks and overcoming traditional analysis limitations.
Inspeckage - Android Package Inspector
Inspeckage: A tool for dynamic analysis of Android apps. Simplifies runtime behavior observation through a web interface, intercepting library calls and allowing interaction with app components.
Advanced SOHO Router Exploitation
Explore advanced techniques for exploiting SOHO routers, including firmware analysis, vulnerability discovery, and ARM/MIPS exploit development. Learn about 0-day vulnerabilities and post-exploitation concepts for household routers.
Cross Platform Metasploit Payloads
Explore cross-platform Metasploit payloads for enhanced penetration testing capabilities. Learn techniques to create versatile and effective payloads across multiple operating systems.
Suborner - Windows Bribery for Invisible Persistence
Discover a stealthy Windows persistence technique that creates invisible machine accounts, evades detection, and impersonates existing users. Learn about the Suborner Attack's implementation and effectiveness.
EDR Evasion Primer for Red Teamers
Insights on EDR inner workings and evasion techniques for red teamers, covering test lab results, reverse engineering findings, and successful attack methodologies to circumvent endpoint protection.
Exploiting Race Condition Vulnerabilities in Web Applications
Explore race condition vulnerabilities in web apps, their impact, and exploitation techniques. Learn about detection challenges, real-world scenarios, and a new penetration testing tool for identifying these elusive security flaws.