Faking at Level 1 - How Digital Twins Save Your PLCs
Explore digital twin technology for safely testing and identifying vulnerabilities in industrial control systems without risking operational infrastructure.
API Security Through External Attack Surface Management
Integrating APIs into External Attack Surface Management to improve security posture. Discover and assess exposed assets, including APIs, for better protection and risk mitigation.
EXPLIoT Framework - An Introduction to IoT Security Testing
Explore IoT security with EXPLIoT framework. Learn key concepts, tools, and protocols for penetration testing and exploit development in IoT environments. Hands-on workshop for security researchers and pentesters.
Testing Vehicles with CANToolz
Explore CANToolz framework for CAN bus analysis, featuring black-box testing of automotive networks and ECUs. Learn practical use-cases for vehicle security research and penetration testing.
Scavenger - Misuse Error Handling Leading to Qemu - KVM Escape
Explore how mishandled error codes in hypervisors can lead to security vulnerabilities, including guest-to-host escape exploits in Qemu/KVM environments.
How to Build Synthetic Persons in Cyberspace
Explore the development of AI agents simulating attackers and defenders in cybersecurity, enhancing training for both defensive and offensive roles in network security.
The Finest Penetration Testing Framework for Software-Defined Networks
Introducing DELTA: A powerful ONF-supported penetration testing tool for Software-Defined Networks. Learn about its capabilities and applications in enhancing SDN security.
The Spear to Break the Security Wall of S7CommPlus
Unveiling vulnerabilities in S7CommPlus protocol, demonstrating potential security breaches in industrial control systems and proposing countermeasures for enhanced protection.
Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit
Explore coverage-based fuzzing of RDP client virtual channels, targeting complex functionalities like Sound, Graphics, USB, and Filesystem to uncover potential vulnerabilities and crashes.
Leveling Up Your Bug Bounty Program
Explore bug bounty programs: benefits, pitfalls, and implementation strategies. Learn from Indeed.com's experience in leveraging diverse skills to enhance security and uncover critical vulnerabilities.
Hunting Asynchronous Vulnerabilities
Explore techniques for uncovering hidden vulnerabilities in backend systems using exploit-induced callbacks. Learn to detect and exploit asynchronous issues across various technologies and platforms.
Hackers in the Wire and Drones Oh My!
Explore powerful, inexpensive penetration testing using ARM-based devices, from wired/wireless dropboxes to flying drones. Control actions remotely, with devices like BeagleBone Black and Raspberry Pi 2.
Going AUTH the Rails on a Crazy Train
Explore common authentication and authorization pitfalls in Rails applications, and learn about a new dynamic analysis tool for security researchers and developers.
Toppling Domino - Testing Security in a Lotus Notes Environment
Explore Lotus Notes/Domino security vulnerabilities and learn effective penetration testing techniques for web servers, native servers, and client-side exploits.
Bypassing Port-Security In 2018 - Defeating MacSEC and 802.1x-2010
Explore novel techniques for bypassing 802.1x-2010 and MacSEC, discussing weaknesses in EAP and demonstrating improved methods for network penetration using the open-source tool Silent Bridge.
Automating Myself Out of a Job - A Pentesters Guide to Left Shifting Security Testing
Explore techniques for integrating automated security testing into the development process, enabling faster releases while maintaining a strong understanding of application risks.
So You Want to Red Team?
Explore red teaming skills, career paths, and the Fortis open-source lab for simulating enterprise environments. Learn to transition from pen testing and develop advanced cybersecurity techniques legally.
See No Evil, Hear No Evil - Hacking Invisibly and Silently with Light and Sound
Explore innovative hacking techniques using light and sound for C2 channels, exfiltration, and exploitation. Learn about bypassing security protections and defending against these novel attack methods.
Hack the Cloud, Hack the Company - The Cloud Impact on Enterprise Security
Explores cloud security vulnerabilities, common deployment mistakes, and effective attack methods. Provides insights on securing cloud services and protecting enterprise IT infrastructure.
Offensive Pcap
Explore libpcap for offensive security: bypass firewalls, intercept traffic, manipulate network connections, and evade detection. Hands-on techniques with source code provided.
Technical Pen Testing - Red and Blue Working Together
Explore red and blue team collaboration in cybersecurity, focusing on effective vulnerability management, threat detection, and risk mitigation strategies for improved organizational defense.