BadUSB Attacks on MacOS - Beyond Using Terminal and Shell Commands
Discover advanced BadUSB attack techniques for MacOS, leveraging Apple-signed LOLBINs and native scripting languages to execute stealthy code without terminal commands.
Attacking DevOps Systems and What it Costs You
Explore real-world DevOps security vulnerabilities through bug bounty examples, including Facebook Github runners and organization compromises, while learning practical defense strategies and attack mitigation techniques.
Top Ways to Hack Your Company and How to Defend Against Them - 2024
Discover prevalent cybersecurity vulnerabilities and defense strategies through real penetration testing insights, focusing on authentication flaws, network poisoning, and emerging threats in modern security landscapes.
Protecting Yourself Online: Social Engineering Defense and Privacy Strategies
Discover essential strategies for protecting your digital footprint from social engineering attacks, learning how pentesters gather public information and implementing effective countermeasures.
How I Found Your Password and Other Advanced Data Hoarding Techniques
Discover advanced techniques for data breach research and legal frameworks while exploring DorXNG, a next-gen OSINT tool for ethical security testing and red team operations.
UDSonCAN Attacks - Discovering Safety Critical Risks by Fuzzing
Explore critical vehicle security vulnerabilities through UDSonCAN fuzzing techniques, revealing potential safety risks in diagnostic systems and their essential countermeasures for modern electric vehicles.
Kubernetes Attack Simulation - The Definitive Guide to Security Monitoring and Detection
Master Kubernetes security monitoring and attack simulation techniques for effective threat detection and defense in containerized environments.
Time-Based SQL Injection Techniques and Defense Strategies
Dive into time-based SQL injection techniques through Operation GhostShell, featuring live demos and defense strategies for protecting against sophisticated database vulnerabilities.
Social Engineering Techniques for Physical Access Red Team Operations
Dive into real-world social engineering tactics through a first-person narrative of complex red team operations, exploring methodologies for physical access and critical infrastructure penetration testing.
Decoding Galah - An LLM-Powered Web Honeypot
Discover how LLM-powered honeypot Galah revolutionizes web security by dynamically simulating multiple applications and analyzing attacker behavior through intelligent HTTP response generation.
Red Team Attack Simulation for Operational Technology - Real-World Case Studies
Dive into real-world attack vectors and strategies for industrial networks through a decade of Red Team exercises, focusing on operational technology and control system vulnerabilities.
ChatGPT and Cybersecurity - Will AI Replace Security Experts?
Explore SK쉴더스 EQST의 생성형 AI 해킹 위협 연구 결과와 사이버보안 분야에서의 ChatGPT 활용 가능성 및 한계점에 대한 전문가의 심층 분석과 통찰.
SQL Injection Isn't Dead - Smuggling Queries at the Protocol Level
Dive into advanced SQL injection techniques and protocol-level query smuggling, exploring sophisticated database security vulnerabilities and modern attack vectors.
Atomic Red Team: Closing the Gap with Threat Actors
Explore Atomic Red Team for effective threat simulation, bridging the gap with real-world attackers. Learn practical techniques to enhance incident response and cybersecurity preparedness.
Caido - Web Application Security Testing Tool Overview and Demonstration
Explore Caido, a powerful web application testing tool. Learn its workflows, bypass techniques, and scripting capabilities to enhance your cybersecurity toolkit and improve penetration testing skills.
Break the Wall: Automated Discovery of Protocol-Level Evasion Vulnerabilities in Web - Session 584
Automated discovery of protocol-level evasion vulnerabilities in web applications, focusing on bottom-up approaches to identify and exploit security weaknesses.
Realistic Web CTF Walkthrough - JWT, API Hacking, SSRF, and SQLi
Walkthrough of NahamCon2024 Mission showcasing JWT tricks, API hacking, SSRF, and SQLi. Learn advanced web security techniques and bug bounty strategies from an experienced hacker.
The Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?
Explore ethical challenges and solutions in handling social engineering pentest aftermath, focusing on responsibility, consequences, and improving security culture.
I Am Whoever I Say I Am - Infiltrating Identity Providers Using a 0-Click Exploit
Explore unauthenticated remote code execution in popular IAM solutions, covering past attacks, audit approaches, and vulnerability chaining for infiltrating identity providers.
Do Not Trust the ASA, Trojans
Explore vulnerabilities in Cisco ASA firewalls, including ASDM package verification issues and FirePOWER module exploits. Learn to create malicious packages and gain root access.
An ACE Up the Sleeve - Designing Active Directory DACL Backdoors
Explore Active Directory DACL backdoors, their offensive potential, and stealth techniques. Learn about control relationships, elevation paths, and persistence methods in AD objects.