Social Engineering Toolkit
Learn advanced social engineering techniques, including credential harvesting, browser exploits, and spearphishing, using the Social Engineering Toolkit for ethical hacking and cybersecurity.
Cloud Access Security Broker - 6 Steps to Addressing Your Cloud Risks
Explore cloud security risks and learn a 6-step approach to address them effectively. Gain insights on threat detection, user coaching, and modern cloud security strategies.
Cloud Security Introduction to FedRAMP
Explore cloud security, FedRAMP certification, and key considerations for organizations adopting cloud technologies in this comprehensive introduction.
Metasploit Townhall
Explore Metasploit's latest developments and future plans with key team members in this informative townhall discussion from DerbyCon 2016.
Stagefright - An Android Exploitation Case Study
Explore Android's Stagefright vulnerability, its root cause, consequences, and exploitation techniques. Learn about security measures, mitigations, and real-world implications for device diversity.
A Year in the Empire
Explore Empire's evolution, new features, and design decisions in this comprehensive overview of the popular post-exploitation framework's development and community impact.
Top 10 Compromise Patterns Observed - How to Use Non-Traditional Internet Datasets
Explore top compromise patterns in non-traditional Internet datasets, focusing on cloud security, marketing campaigns, and EU privacy regulations. Learn to identify and mitigate emerging cybersecurity risks.
Cloning a Game Using Game Hacking and Terabytes of Data
Explore game hacking techniques and data analysis to clone games, with insights on leveraging large datasets for reverse engineering and replication.
Abusing RTF - Exploitation, Evasion, and Exfiltration
Explore RTF file exploitation techniques, evasion methods, and exfiltration strategies. Learn about file tampering, magic files, and fuzzing to enhance your cybersecurity skills.
Metaprogramming in Ruby and Doing It Wrong
Explore Ruby metaprogramming techniques, their benefits, and potential pitfalls. Learn best practices and common mistakes to avoid when leveraging Ruby's dynamic features.
Evolving Your Office's Security Culture
Evolving office security culture: strategies for policy enforcement, organizational maturity, and fostering a security-conscious environment through training and metrics.
I Don't Give One IoTA - Introducing the Internet of Things Attack Methodology
Explore the Internet of Things Attack Methodology, covering hardware analysis, web and mobile app testing, network pentesting, and API testing for IoT security.
Using Binary Ninja for Modern Malware Analysis
Explore modern malware analysis using Binary Ninja. Learn interface, features, and practical implementation for effective reverse engineering and threat analysis.
Establishing a Foothold With JavaScript
Learn JavaScript techniques for establishing a foothold in cybersecurity, including scriptlets, command-line auditing, and dynamic wrappers. Explore practical applications and tools for penetration testing and system analysis.
Garbage in Garbage Out - Generating Useful Log Data in Complex Environments
Explore effective log data generation in complex environments, focusing on meaningful data, thresholds, and log management systems for improved security and analysis.
Fuzzing Basics - How to Break Software
Learn essential fuzzing techniques to identify software vulnerabilities, enhance security testing skills, and improve overall application robustness.
MariaDB - Lock It Down Like a Chastity Belt
Learn essential techniques for securing MariaDB databases, enhancing protection against unauthorized access and data breaches in this comprehensive security-focused session.
Hardening AWS Environments and Automating Incident Response for AWS Compromises
Explore techniques for strengthening AWS security and automating incident response to protect against compromises in cloud environments.
Recharging Penetration Testing to Maximize Value
Strategies to enhance penetration testing effectiveness, including improved scoping, collaboration, and reporting techniques for maximizing value and impact in information security.
Hashview - A New Tool Aimed to Improve Your Password Cracking Endeavors
Explore Hashview, a tool for enhancing password cracking efficiency. Learn setup, user management, job creation, analytics, and future developments in distributed cracking.
Static PIE - How and Why
Explore static Position Independent Executables (PIE) in-depth, understanding their implementation, benefits, and security implications for modern software development.