Adding Simulated Users to Your Pentesting Lab with PowerShell
Learn to enhance your pentesting lab by creating simulated users with PowerShell, improving realism and effectiveness in security testing environments.
How to Conduct a Product Security Test and How it Fits Into the Larger Security Strategy
Learn how to conduct thorough product security tests, from initial investigation to reporting, using various tools and techniques for static and dynamic analysis, fuzzing, and ethical hacking.
Automating Web App Security in AWS
Discover automated security strategies for web applications in AWS, focusing on efficient protection and compliance measures for cloud-based infrastructures.
Hacking Smart Contracts - A Methodology
Explore smart contract vulnerabilities and hacking methodologies, covering reentrancy, public access issues, and transaction-ordering dependencies in Ethereum-based systems.
Fighting Child Exploitation with Oculum
Explore innovative techniques to combat child exploitation using Oculum, a powerful tool for analyzing and identifying illicit content online.
Hack Like a Gopher
Learn to hack efficiently using Go programming language, exploring its powerful features for cybersecurity tasks and penetration testing.
Gamifying Developer Education with CTFs
Learn to create engaging Capture The Flag challenges for developer security education, covering planning, infrastructure, flag types, and lessons learned from real-world experiences.
HTTP2 and You
Explore HTTP/2 protocol's features, benefits, and implementation strategies for improved web performance and security in modern applications.
CTF Tips and Tricks
Explore CTF design strategies to create engaging, accessible challenges. Learn tips for crafting immersive stories, reducing barriers, and fostering lateral thinking in cybersecurity competitions.
The FaaS and the Curious - AWS Lambda Threat Modeling
Explore AWS Lambda threat modeling techniques and security considerations for serverless architectures in this comprehensive analysis of Function-as-a-Service (FaaS) platforms.
Abuse Case Testing in DevOps
Explore abuse case testing in DevOps, covering threat modeling, test development, and integration. Learn to enhance application security through continuous improvement and monitoring.
We Don't Have to Worry About That - It's in the Cloud
Explore cloud security risks and best practices for protecting data and infrastructure in this informative talk by Arnar Gunnarsson at ShowMeCon 2018.
Securing Windows with Group Policy
Explore Windows security through Group Policy, covering restricted groups, user management, privileges, and process mitigation. Learn practical techniques for enhancing system protection.
Lessons Learned from Development and Release of Blacksmith - The Meltdown
Explore memory side channel attacks, speculative execution, and Meltdown vulnerability. Learn about Blacksmith, an autonomous endpoint protection tool, and its development challenges.
Reflective PE Unloading
Explore reflective PE unloading techniques, their importance in cybersecurity, and practical applications through code analysis and comparisons using tools like IDA Pro and PE Bear.
Raindance Raining Recon from the Microsoft Cloud
Explore techniques for gathering reconnaissance data from Microsoft Cloud services, enhancing your cybersecurity knowledge and skills.
Tools and Procedures for Securing .Net Applications
Explore tools and procedures for securing .NET applications, including encryption, active defense monitoring, and security breach strategies.
What's Changed in the New OWASP Top 10
Explore the latest OWASP Top 10 security vulnerabilities, their impact on web applications, and strategies for mitigation in this comprehensive overview.
Mobile Application Privacy and Analytics
Learn about mobile app privacy, analytics, and data collection practices. Explore real-world examples, potential risks, and protective measures for users and developers.
Designing a Cloud Security Blueprint
Comprehensive guide to creating a robust cloud security blueprint, covering key issues, administration, traffic flow, and sandbox environments for enhanced protection.
Advanced Attackers Hiding Inside Encrypted Traffic at the Endpoint
Explore advanced techniques used by attackers to hide within encrypted traffic at endpoints, covering threat evolution, APTs, and emerging cybersecurity challenges.