Pipeline Pandemonium - Hijacking Cloud Security Through CI/CD Vulnerabilities
Explore CI/CD pipeline vulnerabilities in cloud environments, examining real-world examples of security risks and exploitation techniques in GitHub, CircleCI, and Jenkins.
Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS
Explore macOS IPC security, focusing on Mach message handlers. Learn about custom fuzzing techniques to uncover vulnerabilities in privileged RPC-like functions, potentially leading to sandbox escapes and privilege escalations.
All You Need Is Guest - Securing EntraID Guest Accounts
Explore how EntraID guest accounts can pose security risks, bypass limitations, and gain unauthorized access to corporate resources. Learn steps to harden configurations and prevent attacks.
Exploiting Bluetooth Vulnerabilities: From Vehicle Systems to Bank Account Access
Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicle systems using BlueToolkit, exploring real-world security implications and practical attack vectors in automotive and aviation contexts.
RingHopper: From User-Land to SMM - A Journey Through UEFI Vulnerabilities
Delve into the discovery of RingHopper, a critical UEFI vulnerability affecting billions of devices, exploring exploitation techniques and elevation methods across Windows and Linux systems.
Bypassing Falco - How to Compromise a Cluster without Tripping the SOC
Explore techniques to bypass Falco's default ruleset, enabling stealthy cluster compromise. Learn 9 bypass classes for target enumeration, privilege escalation, and lateral movement without alerting security teams.
Tweezering Kubernetes Resources - Operating on Operators
Explore Kubernetes Operators' security risks, threat modeling, and best practices for secure implementation. Learn to assess third-party Operators and conduct effective code reviews for enhanced cluster safety.
Trampoline Pods: Node to Admin Privilege Escalation in Popular Kubernetes Platforms
Explore Trampoline Pods: powerful pods that can enable cluster takeover if compromised. Learn about detection, exploitation, and mitigation strategies for this critical Kubernetes security vulnerability.
The Attacker Perspective - Insights From Hacking Alibaba Cloud's Managed Kubernetes Environments
Explore real-world hacking of managed Kubernetes environments, from initial access to unauthorized database access. Learn to strengthen deployments and enhance security posture through this step-by-step case study.
Ring 0 to Ring -1 Exploitation with Hyper-V IPC
Explore advanced exploitation techniques targeting Hyper-V's inter-process communication, moving from kernel-level to hypervisor-level vulnerabilities in virtualized environments.
Dirty Pipe - CVE-2022-0847 - Linux Privilege Escalation
Demonstración y explicación de la explotación de la vulnerabilidad Dirty Pipe en Linux, incluyendo sobrescritura de archivos de solo lectura y secuestro de binarios SUID para escalar privilegios.
Linux Red Team Privilege Escalation Techniques - Kernel Exploits and SUDO Permissions
Explore techniques for elevating privileges on Linux systems using kernel exploits and misconfigured SUDO permissions. Learn essential skills for red team operations and penetration testing.
Linux Privilege Escalation for Beginners
Learn techniques for escalating privileges on Linux systems, including enumeration, kernel exploits, file permissions, sudo vulnerabilities, and SUID binaries. Gain practical skills through hands-on challenges.
Cluster Grey Zone - Risks in Managed Cluster Middleware
Explore security risks in Managed Cluster Middleware for cloud-based Kubernetes services. Learn about potential vulnerabilities, threat surfaces, and how to adjust your K8s threat model accordingly.
Detecting Crypto-Jacking in Kubernetes Workloads
Detect crypto-jacking in Kubernetes workloads using Falco. Learn to create rules, test environments, and implement security measures for cloud-native applications.
K8s Post-Exploitation: Privilege Escalation, Sidecar Container Injection, and Runtime Security
Explore post-exploitation scenarios in Kubernetes, including privilege escalation, sidecar container injection, and runtime security. Learn detection techniques and security measures to protect your cluster.
Sysarmor: Meta's eBPF Security Detection and Enforcement Tool
Explore Meta's Sysarmor: an eBPF-based security daemon for threat detection and rule enforcement in high-risk environments, featuring efficient in-kernel evaluation and innovative approaches to process and container monitoring.
Hack My Mis-Configured Kubernetes: Security Vulnerabilities and Best Practices
Explore Kubernetes security vulnerabilities, best practices, and hands-on demos to enhance container protection and mitigate misconfigurations in this informative webinar.
Kubernetes Privilege Escalation Tactics - Understanding and Mitigating Vulnerabilities
Explore Kubernetes vulnerabilities, privilege escalation tactics, and mitigation strategies. Learn to secure clusters against insider threats and external attacks through hands-on demonstrations and best practices.
Kubernetes Security Blind Spot - Misconfigured System Pods
Explore Kubernetes security vulnerabilities in system pods, focusing on misconfigurations that can lead to unauthorized access and data breaches. Learn about real-world exploit chains and mitigation strategies.
Restricting Unprivileged User Namespaces in Ubuntu
Explore Ubuntu 24.04's approach to restricting unprivileged user namespaces, including challenges, solutions, and ongoing efforts to address remaining issues.