Microsoft Patch Analysis for Exploitation
Explore techniques for analyzing Microsoft patches to identify vulnerabilities and potential exploitation methods, enhancing your cybersecurity skills.
Red Teaming the Board
Explore red teaming strategies for effective board communication, enhancing cybersecurity awareness and decision-making at the executive level.
Skills for a Red Teamer
Explore essential skills for effective red team operations, including tactics, techniques, and strategies for simulating real-world cyber attacks and improving organizational security.
VoIP Wars - Attack of the Cisco Phones
Explore vulnerabilities in Cisco hosted VoIP systems, including signaling attacks, authentication bypasses, and client compromises. Learn practical penetration testing techniques using the Viproy toolkit.
Mobile Device Mismanagement
Explore vulnerabilities in Mobile Device Management solutions, their impact on enterprise security, and the overlooked risks in deploying these widely-used security products.
What Goes Around Comes Back Around - Exploiting Fundamental Weaknesses in Botnet C&C Panels
Explore techniques for exploiting vulnerabilities in botnet command and control panels, including detection methods, reverse attacks, and automated tools for gathering intelligence.
Racing Towards Practical Timing Attacks
Explore practical timing attacks in web applications, focusing on detection, exploitability, and defense. Learn to distinguish theoretical vulnerabilities from real threats using the 'time trial' tool.
Pivoting in Amazon Clouds
Explore cloud application vulnerabilities and exploitation techniques in Amazon Web Services, from initial access to gaining root account control. Learn about EC2, SQS, IAM, RDS, and more.
Bringing Software Defined Radio to the Penetration Testing Community
Explore wireless device security using Software Defined Radio. Learn to assess vulnerabilities in IoT, smartmeters, and wearables with an easy-to-use tool combining GNU Radio and scapy framework.
Passive Bluetooth Monitoring in Scapy
Explore passive Bluetooth monitoring in Scapy using Python extensions and Ubertooth dongle, enabling interactive observation and development of Bluetooth auditing and pentesting tools.
HTExploit - Bypassing Htaccess Restrictions
Explore HTExploit, an open-source Python tool that bypasses htaccess authentication, allowing unauthorized directory listing and exposing web security vulnerabilities.
XML Out-of-Band Data Retrieval
Explore innovative XML out-of-band data retrieval techniques for accessing files and resources from victim's machines, even with normal output from vulnerable applications.
Hacking Video Conferencing Systems
Explore vulnerabilities in high-end videoconferencing systems, focusing on Polycom HDX devices. Learn about firmware analysis, device rooting, and remote exploitation techniques for H.323 protocol.
Post Exploitation Operations with Cloud Synchronization Services
Explore post-exploitation techniques using cloud sync services. Learn about DropSmack v2, credential theft, and security risks. Gain insights for both network defenders and penetration testers.
Mainframes - The Past Will Come Back to Haunt You
Unveiling mainframe security: Learn configuration, access methods, and potential vulnerabilities in this eye-opening talk for IT security professionals unfamiliar with mainframe systems.
An Introduction to SPIKE
Explore SPIKE, a powerful fuzzing tool for discovering software vulnerabilities. Learn its applications, techniques, and potential impact on cybersecurity testing and exploit development.
Overlooked Local Attack Techniques
Explore overlooked local attack techniques for enhanced information security, leveraging fast response and direct machine examination for more effective penetration testing and analysis.
Advanced SQL Injection in Oracle Databases
Explore advanced SQL injection techniques in Oracle databases, focusing on vulnerabilities, exploitation methods, and defensive strategies for database security professionals.
Looking into the Eye of the Meter
Explore smart meter vulnerabilities, from memory acquisition to hardware sniffing. Learn about authentication credential theft and IR port interaction techniques used by criminals targeting utility infrastructure.
SSRF vs Business Critical Applications
Explore SSRF vulnerabilities in business-critical applications, focusing on SAP systems. Learn about XXE Tunneling and its potential to bypass security restrictions, with practical examples and attack scenarios.
Revealing Embedded Fingerprints - Deriving Intelligence - USB Stack Interactions
Techniques for analyzing USB stack interactions to gather intelligence on embedded systems, including OS identification and vulnerability exploitation challenges.