Zero to Owned in 1 Hour - Securing Privilege in Cloud DevOps On Prem Workflows
Explore privilege escalation techniques and security vulnerabilities in cloud, DevOps, and on-premises environments. Learn to identify and mitigate risks in modern workflows.
My First Year in Application Security
Insights and experiences from a first year in application security, offering valuable lessons and perspectives for those entering or interested in the field.
Pacu Attack and Post Exploitation in AWS
Explore AWS post-exploitation techniques and Pacu, an open-source AWS exploitation framework, to enhance cloud security awareness and improve defensive strategies.
InSpec Compliance as Code
Explore InSpec for compliance-as-code, learning how to automate security and compliance testing in infrastructure and applications.
Threat Modeling - How to Actually Do It and Make It Useful
Learn practical threat modeling techniques for effective cybersecurity. Explore various methodologies, tools, and frameworks to identify and mitigate potential risks in software and systems.
Fuzz Your Smartphone from 4G Base Station Side
Explore smartphone vulnerabilities through 4G base station fuzzing techniques, enhancing mobile security knowledge and practical skills.
Synfuzz - Building a Grammar Based Retargetable Test Generation Framework
Explore a grammar-based, retargetable test generation framework for efficient and comprehensive software testing, enhancing security and reliability.
State of Win32k Security - Revisiting Insecure Design
Explore Win32k security vulnerabilities and design flaws, focusing on recent developments and potential attack vectors in Windows operating systems.
Stable 08 LOL They Placed Their DMZ in the Cloud - Easy Pwnage or Disruptive Protection
Explore innovative cloud-based DMZ strategies, comparing traditional designs with new models and discussing their implications for network security and defense-in-depth approaches.
Lessons Learned by the WordPress Security Team
Explore WordPress security insights, user-centric approaches, and lessons from the WordPress Security Team's experiences in maintaining and improving platform safety.
Stable 13 Tales From the Bug Mine Highlights from the Android VRP
Explore highlights from Android's Vulnerability Reward Program, uncovering critical security issues and their impact on mobile device safety.
Web App 101 - Getting the Lay of the Land
Explore effective web app enumeration techniques, including scoping, testing, forced browsing, and methodology. Learn to optimize your approach and improve your results.
Hacking Mobile Applications with Frida
Learn to hack mobile apps using Frida, a dynamic instrumentation toolkit. Explore techniques for analyzing and modifying app behavior in real-time on iOS and Android platforms.
Stable 23 Pacu Attack and Post Exploitation in AWS
Explore AWS post-exploitation techniques using Pacu, an open-source tool for cloud security testing and privilege escalation in Amazon Web Services environments.
Cloud Computing Therapy Session
Explore cloud computing challenges and solutions in this therapy-style session, offering insights and strategies for effective implementation and management.
Web App Testing Classroom in a Box - The Good, the Bad, and the Ugly
Explore web app testing strategies, from ideal scenarios to real-world challenges. Learn effective techniques for red and blue teams, ethical hacking, and auditing.
Cloud Forensics - Putting The Bits Back Together
Explore cloud forensics techniques for reconstructing digital evidence, focusing on methods to reassemble fragmented data in cloud environments.
Approaching Parity - Considerations for Adapting Enterprise Monitoring
Explore enterprise monitoring adaptation strategies, focusing on CSIRT implementation in AWS, automated playbooks, and effective incident response techniques.
Sky High IR - IR at Cloud Scale
Explore cloud-scale incident response strategies, challenges, and critical components for effective security management in AWS environments.
Python Scripting
Learn Python scripting fundamentals through hands-on exercises, covering variables, loops, JSON parsing, and object-oriented programming. Build practical skills for automating tasks and data manipulation.
The Hybrid Home Lab - From Laptop to Cloud
Explore building a hybrid home lab, from laptop to cloud, with automation tools and best practices for efficient and secure infrastructure management.