Making Mongo Cry - Attacking NoSQL for Pen Testers
Learn techniques for attacking NoSQL databases, focusing on MongoDB vulnerabilities and exploitation methods for penetration testers and security professionals.
Gone in 60 Minutes - A Practical Approach to Hacking an Enterprise
Practical approach to hacking an enterprise using Yasuo tool. Covers shell generation, exploiting vulnerabilities in Tomcat and Jenkins, and password extraction techniques.
Penetrate Your OWA
Explore techniques for penetrating Outlook Web Access (OWA) and enhancing your security testing capabilities in this informative DerbyCon 4 presentation.
Third Party Code - Fix All the Things
Explore strategies for managing third-party code vulnerabilities and learn effective approaches to mitigate risks in software development and security.
Bending and Twisting Networks
Explore network manipulation techniques for security testing, including bending and twisting methods to identify vulnerabilities and strengthen defenses.
Analyzing Weak Areas of the Federal Cloud Security Program
Analyzing weaknesses in federal cloud security, focusing on FedRAMP, IRS audits, accountability, system boundaries, and continuous monitoring for improved cybersecurity.
CMS Hacking Tricks
Explore advanced techniques for exploiting content management systems, uncovering vulnerabilities, and enhancing web application security.
The Canary in the Cloud
Explore cloud security vulnerabilities and detection techniques with insights on protecting sensitive data and infrastructure in cloud environments.
Introduction to System Hardening
Learn system hardening essentials: security compliance, inventory, least privilege, audit policies, and best practices for Java, admin passwords, and group policies.
What Your Web Vulnerability Scanners Aren't Telling You
Explore common web vulnerabilities often missed by automated scanners, including logic flaws, authentication issues, and access control problems. Learn defensive strategies for better web security.
Are You Really PCI DSS Compliant - Case Studies of PCI DSS Failure
Explore PCI DSS compliance challenges, common failure points, and case studies. Learn about cardholder data segmentation, scoping, vulnerability management, and security testing for better implementation.
Exercising with Threat Models
Explore practical threat modeling techniques to enhance cybersecurity strategies and identify potential vulnerabilities in systems and networks.
Cloud and Virtualization Theory
Explore cloud computing and virtualization concepts, including providers, benefits, challenges, security considerations, and best practices for secure adoption and implementation.
OWASP Mobile Top Ten - Why They Matter and What We Can Do
Explore OWASP Mobile Top Ten vulnerabilities, their significance, and strategies for mitigation. Learn about transport layer protection, threat modeling, and best practices for mobile app security.
Hijacking Label Switched Networks in the Cloud
Explore techniques for hijacking label switched networks in cloud environments, focusing on security vulnerabilities and potential attack vectors.
OWASP 2014 Top 10 Proactive Web Application Controls
Explore proactive web application security controls, focusing on preventing SQL injection, XSS attacks, and implementing robust access controls and password policies.
Agile and Security - Oil and Water
Explore the integration of Agile methodologies and security practices, addressing challenges and proposing solutions for effective implementation in software development.
Critical Infrastructure - The Cloud Loves Me, The Cloud Loves Me Not
Explore the complex relationship between critical infrastructure and cloud computing, examining benefits, risks, and strategies for secure integration.
Intrusion Detection in the Clouds
Learn effective cloud-based intrusion detection techniques and strategies to enhance your organization's cybersecurity posture in this informative presentation by Josh Pyorre.
Mutillidae Jeremy Druin Part 2
Learn to install and configure Mutillidae, explore security levels, and understand OWASP Top 10 vulnerabilities with expert guidance from Jeremy Druin.
The Benefits in Externalizing DMZ as a Service in the Cloud
Explore the benefits of cloud-based DMZ services, covering web architecture, security measures, and application firewalls. Learn about attack types and secure development practices.