Attack Scenarios Abusing Azure Active Directory
Explore Azure AD security vulnerabilities, privilege escalation techniques, and mitigation strategies. Learn to protect your organization's cloud infrastructure from potential attacks and misconfigurations.
Modern Post Exploitation - The Ghost In The Cloud
Explore modern post-exploitation techniques in cloud environments, focusing on IAM vulnerabilities in enterprise apps. Learn attacker strategies, discovery methods, and evasion tactics against security tools.
From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes
Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.
Advanced Process Injection Techniques
Hands-on workshop exploring APT tactics for privilege escalation and persistence. Learn to develop stealthy implants through 7 labs on Windows process injection techniques.
Linux Vulnerabilities, Windows Exploits - Escalating Privileges with WSL
Explore WSL vulnerabilities and Windows kernel exploitation techniques. Learn about reverse engineering, syscall manipulation, and bypassing modern anti-exploitation defenses to achieve privilege escalation.
Blue Pill for Your Phone
Exploración de vulnerabilidades en hipervisores y TrustZone de teléfonos ARM modernos, analizando vectores de ataque y métodos para elevar privilegios. Incluye lanzamiento de soporte ARM para CHIPSEC.
Serverless Security - Attack & Defense
Explore serverless security vulnerabilities, attack techniques, and defense strategies through live demos, covering NPM package exploits, RCE, privilege escalation, and insecure defaults in serverless frameworks.
Step by Step AWS Cloud Hacking
Explore real-life AWS cloud exploitation techniques, from zero access to full privilege escalation and internal network access via custom AWS Client VPN, using practical concepts and tools.
macOS - Gaining Root with Harmless AppStore Apps
Explore techniques for escalating privileges on macOS using seemingly harmless App Store applications, uncovering potential security vulnerabilities in the operating system.
Whoami Priv - Show Me Your Privileges and I Will Lead You to SYSTEM
Explore Windows privilege escalation techniques, focusing on token manipulation and privilege abuse to achieve SYSTEM-level access. Learn about SeImpersonate, SeAssignPrimary, and the Juicy Potato exploit.
I Know What Your Microsoft Mainframe Did Last Summer
Explore Active Directory forensics, lateral movement, and reconnaissance techniques. Learn to hunt for clues without AD logs using open-source tools in this hands-on session with real-world incident insights.
Hacking Android Foreground Services Escalation Of Privileges
Explore Android foreground services vulnerabilities, including a race condition bug and its patch bypass, demonstrating potential escalation of privileges and security implications.
Breaking Microsoft Edge Extensions Security Policies
Uncover vulnerabilities in Microsoft Edge extensions, exploring permission bypasses, data theft, and security policy breaches. Learn about browser extension security and its impact on user privacy.
Abusing WCF Endpoint for RCE and Privilege Escalation
Explore WCF vulnerabilities in .NET programs, focusing on privilege escalation and remote code execution. Learn to identify and exploit these bugs through a real-world case study.
Outside the Box - Breakouts and Privilege Escalation in Container Environments
Explore real-world container escapes and privilege escalation techniques in popular solutions like Docker and Kubernetes. Learn methodologies for assessing containerized environments and implementing secure configurations.
The Blackbear Project
Explore a modified OpenSSH daemon that enhances post-exploitation capabilities, bypasses network restrictions, and provides reliable interactive shell access for penetration testing and security research.
Hacking POS Systems
Explore PoS system vulnerabilities, from physical access to data extraction. Learn about kiosk breakouts, privilege escalation, and real-world examples of critical security flaws in hotel management platforms.
Well, That Escalated Quickly! A Penetration Tester’s Approach to Privilege Escalation - DefCamp - 2018
Explore penetration testing techniques for privilege escalation, covering Windows systems, services, and common vulnerabilities. Learn practical approaches to identify and exploit security weaknesses.
Credential Assessment - Mapping Privilege Escalation at Scale
Explore privilege escalation techniques in large-scale breaches and learn how to identify and combat credential exposure using a comprehensive framework for both offensive and defensive purposes.
Hitting the Gym - The Anatomy of a Killer Workout
Explore security vulnerabilities in smart fitness equipment, focusing on treadmills. Learn about potential risks, attack surfaces, and implications for both users and corporate environments.
Tackling Privilege Escalation with Offense and Defense
Explore privilege escalation in JavaScript engines, focusing on offensive techniques and defensive strategies. Learn about vulnerabilities, attack surfaces, and security model improvements.