The 3 Way09 Going AUTH the Rails on a Crazy Train
Explore authentication vulnerabilities in Ruby on Rails applications, focusing on common pitfalls and effective security measures for web developers.
Break Me - Credential Assessment Mapping Privilege Escalation at Scale - Matt Weeks
Explore credential assessment, mapping, and privilege escalation techniques for enhanced cybersecurity. Learn from major breaches and industry responses to improve defensive strategies.
Credential Assessment Mapping Privilege Escalation at Scale
Explore credential assessment mapping and privilege escalation techniques for enhanced cybersecurity. Learn from major breaches and industry responses to improve defensive strategies.
Bad Guys Look Just Like You
Explore privileged credential management, privilege escalation, and cybersecurity strategies to protect against insider threats and enhance organizational security posture.
Abusing IoT Medical Devices for Your Precious Health Records
Explore vulnerabilities in connected medical devices and their potential impact on patient data security, with insights on exploiting IoT healthcare systems.
Stable 37 - Comparing Apples to Apple
Explore macOS security concepts, credential access, privilege escalation, and persistence techniques in this comprehensive overview of Apple system vulnerabilities and defenses.
Movement After Initial Compromise
Explore advanced techniques for lateral movement in compromised networks, focusing on post-exploitation strategies and stealthy persistence methods.
Check Your Privilege Escalation
Learn privilege escalation techniques, from basic permissions to advanced kernel exploits, enhancing your cybersecurity skills and understanding of system vulnerabilities.
UBoot to Root
Explore embedded device security vulnerabilities and exploitation techniques in this comprehensive talk on UBoot to Root by Deral Heiland.
Inside the Rise, Fall and Legacy of iOS Jailbreaking
Insider's account of iOS jailbreaking: its rise, community impact, and eventual decline as Apple incorporated hacker innovations. Explores lessons for future technologies and the hacker ethos.
I Know What Your AD Did Last Summer - Talks About Active Directory
Explore Active Directory security, lateral movement, and privilege escalation techniques. Learn forensic approaches for investigating AD incidents using open-source tools, with insights for both red and blue teams.
How to Escalate Privileges to Administrator in Latest Windows
Learn techniques for escalating privileges to administrator level in recent Windows versions, including Microsoft Bounty Program insights and live demonstrations.
Cloud Native Application Protection Platform (CNAPP) - Understanding Security for Modern Applications
Discover how to protect cloud native applications with Cisco's CNAPP platform, exploring security threats, vulnerability assessments, and defense strategies for modern microservice architectures.
Hunting for macOS Application Logic Bugs - Local Privilege Escalation Vulnerabilities
Discover critical macOS security vulnerabilities and privilege escalation bugs affecting major software products, with practical exploitation techniques and defensive strategies for improved visibility.
Abusing Mixed Vendor Kerberos Stacks - Exploiting Windows AD and Linux Authentication
Discover security vulnerabilities in mixed Kerberos environments and learn how to exploit weaknesses between Windows Active Directory and Linux/Unix systems for privilege escalation.
Sudos and Sudon'ts - Peering Inside Sudo for Windows
Delve into Windows security mechanisms through an analysis of Sudo for Windows, exploring process elevation, ALPC services, and Rust-Windows API interactions while uncovering potential security vulnerabilities.
Validating the eBPF Verifier via State Embedding
Innovative technique for validating eBPF verifier correctness using state embedding, uncovering critical Linux kernel security bugs and improving overall system reliability.
CertifiedDCOM - The Privilege Escalation Journey to Domain Admin with DCOM
Uncover a critical DCOM vulnerability allowing remote privilege escalation to Domain Admin in Windows networks. Learn about DCOM internals and exploit techniques for Active Directory takeover.
Exploring a New Class of Kernel Exploit Primitive
Uncover innovative kernel exploit techniques using limited primitives, focusing on turning seemingly benign bugs into powerful attack vectors for code execution and privilege escalation.
Kubernetes Privilege Escalation - Container Escape Equals Cluster Admin
Explore Kubernetes security vulnerabilities, privilege escalation techniques, and container escape risks. Learn to identify powerful system pods and implement mitigations to protect your cluster from potential attacks.
Cautious - A New Exploitation Method! No Pipe but as Nasty as Dirty Pipe
Unveils a novel exploitation technique surpassing Dirty Pipe, enabling arbitrary file overwriting and privilege escalation through double-free vulnerabilities, applicable across affected kernel versions.