Linux Red Team Exploitation Techniques - Exploiting WordPress & MySQL
Aprenda técnicas de exploração de equipe vermelha para identificar e explorar vulnerabilidades em servidores Linux com aplicações web, focando em WordPress e MySQL.
Nginx ModSecurity Tutorial - Nginx WAF
Learn to secure Nginx with ModSecurity, an open-source web application firewall. Explore real-time request inspection, protection against XSS and SQL injection attacks, and active monitoring for enhanced web server security.
Exploiting Race Conditions - Black Belt Pentesting and Bug Hunting
Explore advanced web attack techniques focusing on exploiting race conditions, enhancing your penetration testing and bug hunting skills for full-stack exploitation.
Black Belt Bug Hunting - Token Hijacking via PDF File
Learn advanced token hijacking techniques using PDF files in this expert-level web security tutorial, enhancing your penetration testing and bug hunting skills.
Security and Privacy Challenges for Children in K-12 Classrooms
Explores security and privacy challenges in K-12 classrooms, highlighting the need for child-specific design in authentication, permissions, and data protection to ensure safe and effective educational technology use.
Creating Custom Hardware Interfaces for ROS2 Control
Learn to create custom hardware interfaces for ros2_control, enabling integration of any hardware. Includes demo code walkthrough, modifications, and practical improvements for robotics projects.
Elite Security Champions: Building a Strong Security Culture in DevSecOps
Explore building an elite Security Champion program for DevSecOps success. Learn essential skills, program elements, and strategies to create a strong security culture and maximize ROI.
Overcoming Resistance to Threat Modeling in Organizations
Strategies for overcoming resistance to threat modeling in organizations, addressing common obstacles, and turning initial rejections into opportunities for gradual adoption and growth.
Build More Secure Apps with OWASP SKF and ASVS on Kubernetes
Enhance app security using OWASP SKF & ASVS on Kubernetes. Learn integration, manage ASVS requirements, and explore SKF Labs. Includes demo and GitHub repo for easy deployment on EC2 or AWS.
Scanning at Scale with OWASP ZAP - Technical Challenges and Improvements
Explore techniques for scaling OWASP ZAP scans, including technical challenges, modifications, and improvements. Learn from Probely's experience as active ZAP contributors.
Using API Specifications to Attack APIs
Explore API security vulnerabilities, breaches, and scanning tools. Learn to leverage API specifications for both protection and potential exploitation in this comprehensive overview.
Defense-in-Depth Engineering Techniques for Secure Software Design
Explore techniques for building resilient software, identifying overlooked vulnerabilities, and designing for incident preparedness. Learn to architect secure systems and improve incident response capabilities.
Knowing What Risks Matter and Don't in Your Open Source
Explore key findings on open-source software risks, including usage trends, vulnerability rates, and best practices. Learn to prioritize and address critical issues in application security.
AutoCAD to iClone - AWP Sniper Modeling Tutorial
Step-by-step guide for modeling an AWP sniper rifle in AutoCAD and importing it into iClone for 3D animation projects. Includes real-time demonstration and practical tips for weapon creation.
Towards Intelligent Application Security
Exploring the evolution of application security and proposing an automated approach integrating security into development and operations, aided by learning techniques and threat intelligence.
How to Tune a PID Controller for an Inverted Pendulum
Practical guide to manually tuning a PID controller for an inverted pendulum system, demonstrating Arduino-Python integration and step-by-step adjustment of Kp, Ki, and Kd parameters.
Attacking and Defending Supply Chains - How We Got Admin in Your Cloud
Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.
Snow Nor Rain Nor Dependency Confusion - How to Deliver the Right Package
Practical insights on identifying, exploiting, and fixing dependency confusion vulnerabilities in real-world package environments, based on firsthand experience.
Casting Light on Unpaired Vision Reality - Accessibility in Urban Environments
Explore accessibility challenges for visually impaired individuals in urban environments, emphasizing inclusive design and emotional impact. Gain insights from Greece's first visually impaired model.
Teach Your SBOM New Tricks with Bomshell
Explore bomshell, a scripting language for SBOM based on CEL. Learn to query, combine, and reshape SBOM documents across formats, enhancing compatibility and streamlining ingestion processes.
Is the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities
Explore strategies for mitigating open source software vulnerabilities, including supply chain attacks, SBOMs, and next-generation security controls for robust defense and compromise resilience.