Getting the Data Out Using Social Media
Explore techniques for data exfiltration using social media platforms, including testing, demos, and defensive strategies. Learn about multichannel capabilities and message size limits.
Intro and Hack the Future
Explore cybersecurity frameworks, reputation in vendor support, and the intersection of digital and physical worlds. Gain insights on information value, complexity, and protecting digital assets.
Crema - A LangSec Inspired Language
Explore LangSec principles and the Crema language for secure programming, focusing on least computational privilege and sub-Turing execution to enhance software security.
Harvesting Passwords from Source Code Scripts and Code Repositories
Explore techniques for extracting passwords from source code, scripts, and repositories, enhancing security awareness and vulnerability detection skills.
Embedding Web Apps in MITMProxy Scripts
Learn to embed web applications in MITMProxy scripts for enhanced network traffic manipulation and analysis, with practical techniques demonstrated by security expert Chris Czub.
Taking a Distributed Computing Approach to Network Detection with Bro and the Cloud
Explore distributed computing for network detection using Bro and cloud technologies. Learn about challenges, solutions, and a master-minion architecture for improved cybersecurity.
Attacking OWASP - Exploiting the Top 10
Explore OWASP Top 10 vulnerabilities through hands-on demonstrations, learning practical exploitation techniques and essential web security concepts for effective penetration testing.
Stable12 Hacking Web Apps
Learn web application hacking techniques and strategies from expert Brent White in this informative conference talk from Derbycon 2015.
Break Me09 Stagefright - Scary Code in the Heart of Android
Explore Android's Stagefright vulnerability, its impact on device security, and potential exploitation techniques in this in-depth analysis of a critical mobile security flaw.
Hacking Virtual Appliances
Explore techniques for hacking virtual appliances, including command injection, filesystem analysis, and undocumented accounts. Learn about security vulnerabilities and vendor communication.
Mobile Application Reverse Engineering Under the Hood
Explore mobile app reverse engineering techniques, from sensitive data extraction to analyzing Android package files, with practical tools and methods for both iOS and Android platforms.
The 3 Way09 Going AUTH the Rails on a Crazy Train
Explore authentication vulnerabilities in Ruby on Rails applications, focusing on common pitfalls and effective security measures for web developers.
Dynamic Analysis of Flash Files
Dynamic analysis techniques for Flash files, exploring methods to uncover vulnerabilities and potential security risks in SWF content.
Stable35 Spy Vs Spy - How to Use Breakable Dependencies to Your Advantage
Learn to leverage breakable dependencies strategically in cybersecurity, exploring techniques to gain advantages in offensive and defensive operations.
The Little Known Horrors of Web Application Session Management
Explore the hidden dangers of web application session management and learn crucial security insights to protect your digital assets.
The Problems with JNI Obfuscation in the Android Operating System
Explore JNI obfuscation issues in Android OS, covering build process, software stack, and practical reverse engineering techniques for both static and dynamic analysis.
Python For Infosec
Learn to leverage Python for information security tasks, enhancing your cybersecurity toolkit with practical coding skills and automation techniques.
Cloud Device Insecurity
Explore cloud device vulnerabilities and security challenges with expert insights on protecting connected systems in the modern digital landscape.
Hacking Web Apps with Style Path Relative Style
Explore web application vulnerabilities and attack techniques using style path relative methods, enhancing your understanding of web security and ethical hacking practices.
How the Cloud Drives Better Security
Explore how cloud technology enhances security, addressing data loss, user experience, and threat detection. Learn about innovative approaches to protect digital assets in the modern era.
Bumper Massage - Punch and Counter Punch Part Deux - Web Applications
A short, under 1-hour program featuring videos from GrrCON 2015, focusing on web applications.