Threat Modeling Cloud Services Using Crosswalk Between STRIDE Framework and CSA's CCM
Learn to model cloud service threats using a crosswalk between the STRIDE framework and CSA's Cloud Controls Matrix, enhancing your cloud security assessment skills.
Zero to Hero - MS17-010-EternalBlue, GPP-cPasswords, and Kerberoasting
Comprehensive tutorial on exploiting MS17-010, GPP/cPasswords, and Kerberoasting, followed by an extensive Q&A session covering various cybersecurity topics and career advice for aspiring pentesters.
CISSP Certification Exam Lectures
Comprehensive preparation for the CISSP certification exam, covering all 8 domains of information security management and providing strategies for exam success.
A Formal Security Analysis of the W3C Web Payment APIs - Attacks and Verification
Explore formal security analysis of W3C Web Payment APIs, including potential attacks and verification methods. Learn about browser models and gain insights into API security.
Cybersecurity Career Paths: CEH vs CISSP, Degrees, and CTFs vs Penetration Tests
Informative discussion on CEH vs CISSP certifications, cybersecurity degrees, and differences between CTFs and penetration tests, offering insights for aspiring infosec professionals.
How to Build a Pentest Dropbox
Learn to create a powerful pentest dropbox for remote network access and security testing, enhancing your ethical hacking toolkit and capabilities.
API Security Through External Attack Surface Management
Integrating APIs into External Attack Surface Management to improve security posture of external-facing APIs. Discusses challenges in asset visibility and strategies for effective protection.
Leveraging Social Engineering in Physical Security Assessment - 2017
Explore techniques for leveraging social engineering in physical security assessments, enhancing your ability to identify vulnerabilities and strengthen organizational defenses.
Nmap Class - TCP IP and Basics of Nmap Part 2
Explore TCP/IP fundamentals and Nmap basics in this cybersecurity session. Learn network scanning techniques from industry experts to enhance your security skills and knowledge.
Analyzing and Improving the Security Properties of Secret Memory
Explore techniques for enhancing secret memory security in Linux systems, covering trusted kernels, container security, and cloud security considerations.
Application Penetration Testing
Learn application penetration testing techniques and methodologies to identify vulnerabilities and secure web applications effectively.
Dangerous Electronic Redteam Practices
Explore dangerous electronic redteam practices with Luis Santana, covering advanced techniques for ethical hacking and cybersecurity assessments.
Leveraging Mobile Devices on Pentests - OISF 2013
Learn to leverage mobile devices in penetration testing with expert Georgia Weidman. Discover techniques and strategies for enhancing security assessments using smartphones and tablets.
Opening the Treasure Chest: Attacking Network Attached Storage on a Pen Test
Explore techniques for attacking Network Attached Storage during penetration testing, uncovering vulnerabilities and securing critical data storage systems.
Footprinting Techniques for Offensive Security
Comprehensive exploration of footprinting techniques, covering DNS, zone transfers, whois, and traceroute for enhanced cybersecurity understanding and practical application.
I'm a Hacker and I'm a QSA - Notacon 9 Presentation
Explore the intersection of hacking and QSA roles, examining ethical considerations and professional responsibilities in information security.
Vulnerability Spidey Sense - Developing Intuition for Security Flaws
Develop your "vulnerability spidey sense" to identify and exploit security weaknesses in applications, guided by expert insights and practical techniques.
4140 Ways Your Alarm System Can Fail
Explore vulnerabilities in alarm systems and learn how they can be compromised, with insights from security experts on improving protection against potential failures.
Maturing the Pen Testing Professional - Challenges and Solutions
Explore the evolution of penetration testing, its challenges, and future directions. Learn about industry standards, methodologies, and qualifications to enhance your professional skills in cybersecurity.
Red Team Tales: 7 Years of Physical Penetration Testing
Explore real-world physical penetration testing experiences across diverse facilities, from banks to cheese factories. Gain insights into security vulnerabilities and unconventional tactics used in red team operations.
OWASP SAMM2 - Your Dynamic Software Security Journey
Explore OWASP SAMM2's dynamic approach to software security, enhancing your development practices and strengthening application defenses throughout the lifecycle.