Revealing SSNs and Hacking Reddit: A Bug Bounty Journey
Descubre cómo identificar vulnerabilidades IDOR y aplicarlas en bug bounty. Aprende de experiencias reales en la búsqueda de fallos de seguridad en plataformas populares.
Mi Camino a los 2500 Puntos de Reputación en HackerOne
Experiencia en bug bounty: desde los inicios hasta 2500 puntos en HackerOne. Consejos sobre reportes, cálculo de riesgos y colaboración en la comunidad de cazadores de vulnerabilidades.
Mobile Hacking 101 - A Cross-Platform Audit Journey
Descubre técnicas y herramientas para auditar la seguridad de aplicaciones móviles multiplataforma, identificando riesgos y vulnerabilidades en prácticas de programación deficientes.
100 Vulnerabilities in 30 Days - Hacking the World's Largest Insurance Company
Descubre cómo un equipo de seguridad identificó 100 vulnerabilidades en 30 días en la mayor aseguradora mundial. Aprende métodos, herramientas y lecciones de este impresionante logro en bug bounty.
Hunting Web Vulnerabilities - Introduction to Ethical Hacking - Workshop 3
Taller práctico sobre hacking ético de sitios web. Aprende técnicas legales para identificar vulnerabilidades, comprender el funcionamiento de la web y explorar oportunidades en seguridad informática.
Windows Privilege Escalation Techniques - Ekoparty Summer Workshop 2024
Taller práctico de post-explotación en Windows, enfocado en técnicas de escalada de privilegios y ataques "Living off the land". Cubre recopilación de información, servicios inseguros, UAC bypass y automatización.
100 Vulnerabilities in 30 Days - Hacking the World's Largest Insurance Company
Descubre cómo un equipo de seguridad identificó 100 vulnerabilidades en 30 días en una gran aseguradora, explorando métodos, herramientas y lecciones aprendidas en bug bounty.
Red Team Hold'em - 40 Minutes to Win the Game with Initial Access
Simulación en tiempo real de un desafío de acceso inicial en ciberseguridad. Expertos demuestran tácticas y técnicas para infiltrarse en un entorno objetivo en solo 40 minutos, ofreciendo una experiencia práctica e intensa.
Desvendando Application Security - Proteção de Software no Ciclo de Desenvolvimento
Explore o processo de segurança de aplicações para proteger software durante seu desenvolvimento. Aprenda a implementar medidas, realizar testes e monitorar ameaças para aumentar a resiliência.
Advanced Penetration Testing: Scripting for Ethical Hackers - Part 1
Master advanced ethical hacking techniques through hands-on scripting exercises, focusing on bash environment, variables, functions, and automated scanning tasks for enhanced penetration testing skills.
Hackers Demonstrate a Ransomware Attack
Comprehensive demonstration of a ransomware attack, covering setup, exploitation techniques, data theft, and defense strategies. Includes discussions on hacking tools, ethics, and cybersecurity career insights.
How to Setup Your Terminal for Penetration Testing
Automate penetration testing methodology using Linux utilities and custom ZSH plugins. Learn to set up an efficient terminal environment for enhanced cybersecurity workflows.
Docker for Pentesting & Bug Bounty Hunting
Explore Docker's potential for pentesting and bug bounty hunting. Learn to set up Kali Linux, OWASP Juice Shop, and Bug Bounty Toolkit, enhancing your cybersecurity skills and workflow efficiency.
Docker for Pentesting and Bug Bounty Hunting
Learn to leverage Docker for pentesting and bug bounty hunting. Set up Kali Linux, OWASP Juice Shop, and Bug Bounty Toolkit containers. Explore advantages and practical applications of containerization in cybersecurity.
Cybersecurity Career Paths: CEH vs CISSP, Degrees, and CTFs vs Penetration Tests
Informative discussion on CEH vs CISSP certifications, cybersecurity degrees, and differences between CTFs and penetration tests, offering insights for aspiring infosec professionals.
HackTheBox Curling - Walkthrough
Comprehensive walkthrough for pwning Curling on HackTheBox, covering scanning, exploiting Joomla vulnerabilities, and gaining system access.
DNS Enumeration Tutorial - Dig, Nslookup & Host
Learn DNS enumeration techniques using Dig, Nslookup, and Host tools for effective reconnaissance and troubleshooting in network security and administration.
KRACK Attack Proof of Concept on Android and Linux Devices
Demonstration of KRACK Attack Proof of Concept on Android/Linux devices, including installation, configuration, and testing steps for this Wi-Fi security vulnerability.
QuasarRAT - Remote Administration Tool for Windows
Explore QuasarRAT, a powerful Windows remote administration tool with features like file management, remote desktop, and keylogging. Learn its capabilities and potential applications.
Shodan Search Engine Tutorial - Access Routers, Servers, Webcams + Install CLI
Explore Shodan's capabilities to find internet-connected devices, from webcams to routers. Learn search techniques, filters, and CLI installation for enhanced cybersecurity awareness.
Asset Discovery Using Shodan
Explore asset discovery techniques using Shodan for bug bounty reconnaissance. Learn effective strategies to uncover vulnerabilities and expand your target scope.