The Bug Hunter's Methodology - Application Analysis
Discover advanced techniques for application analysis in bug hunting with insights from a top-ranked researcher. Learn recon strategies and web app vulnerabilities to enhance your ethical hacking skills.
Phishing - Going From Recon to Credentials
Learn effective phishing techniques, from reconnaissance to credential harvesting. Explore tools, automation, and the Speed Fishing Framework in this comprehensive overview.
Introduction to Red Team Tooling and Opsec
Explore modern red team techniques, tools, and operational security practices for effective penetration testing and cybersecurity assessments.
ATGP - Intro For New WCTFers
Explore wireless capture techniques, legal considerations, and essential tools for effective signal reconnaissance and analysis in this comprehensive introduction.
Red Team Yourself - Thomas Richards
Learn to assess your organization's security through red teaming techniques. Discover threat actors, asset protection, and engagement strategies for comprehensive security program improvement.
The Art of the Breach
Comprehensive guide to physical security breaching, from reconnaissance to exit strategies. Explores various entry methods, overcoming obstacles, and combining infosec with first responder techniques.
How to Give the Best Pen Test of Your Life
Discover strategies for conducting exceptional penetration tests, enhancing your skills and delivering valuable results to clients. Learn from expert Ed Skoudis's insights and techniques.
OSINT for AppSec Recon ng and Beyond - Tim Tomes
Explore OSINT techniques for AppSec reconnaissance using Recon-ng, covering data extraction, vulnerability scanning, and leveraging online resources for effective security assessments.
Forging Your Identity - Credibility Beyond Words
Explore identity credibility in physical security assessments, covering reconnaissance, tools, and strategies for successful penetration testing and safe exit.
Attackers Perspective - A Technical Demonstration of an Email Phishing Attack
Explore email phishing attacks from an attacker's perspective, covering reconnaissance, tools, payload delivery, and network enumeration techniques for improved cybersecurity awareness.
Red Team Yourself - Thomas Richards
Learn adversary emulation techniques, build an in-house red team, and master reconnaissance and attack planning for comprehensive security assessments.
Full Contact Recon
Explore advanced reconnaissance techniques with int0x80 of Dual Core, focusing on innovative methods for gathering intelligence and enhancing cybersecurity strategies.
Red Team Yourself - Thomas Richards
Learn to emulate adversaries, conduct comprehensive security assessments, and build an effective in-house red team. Explore reconnaissance, attack planning, and post-exploitation techniques for robust cybersecurity.
Finding Hidden Gems in Temporary Mail Services - Monitoring and Security Analysis
Discover how to monitor temporary email services using a Python tool to uncover valuable information, from account credentials to bitcoin wallets, while learning about security implications and red team activities.
Physical OSINT: Finding and Investigating Facilities Using Open Source Intelligence
Discover essential physical OSINT techniques and tools for gathering intelligence, from basic social media searches to advanced facility reconnaissance and data collection methods.
Let Me Do It For You: Automating OSINT and Recon
Discover effective strategies for automating OSINT and reconnaissance processes to streamline cybersecurity investigations and threat intelligence gathering.
Crushing Crumbs of Information: Using OSINT to Build Complete Target Profiles
Discover how to leverage seemingly insignificant data leaks from public websites to build comprehensive OSINT profiles, with practical examples and tools demonstrated through Brazilian case studies.
Azure AD Reconnaissance Using OSINT Tools
Discover how to gather intelligence on Azure AD environments using OSINT tools, including domain enumeration, authentication methods, and user information for security assessment purposes.
Easy EASM - The Zero-Dollar Attack Surface Management Tool
Discover how to implement Easy EASM, a zero-cost tool for automated external asset discovery and monitoring, featuring daily Slack/Discord alerts and comprehensive asset tracking capabilities.
Realistic Web CTF Walkthrough - JWT, API Hacking, SSRF, and SQLi
Walkthrough of NahamCon2024 Mission showcasing JWT tricks, API hacking, SSRF, and SQLi. Learn advanced web security techniques and bug bounty strategies from an experienced hacker.
Controlling the Source - Abusing Source Code Management Systems
Explore vulnerabilities in Source Code Management systems, including reconnaissance, user role manipulation, and repository takeover. Learn attack scenarios and defensive strategies for GitHub, GitLab, and Bitbucket.