ASVS Testing: Understanding Access Requirements for Verification
Analyzing ASVS requirements to identify necessary access for accurate verification, aiding test case generation and helping companies understand the effort required for comprehensive security assessments.
New Web Hacking Tool CAIDO: A Potential Burp Suite Alternative
Explore CAIDO, a potential Burp Suite alternative for web hacking. Learn setup, project creation, targeting, sitemap, scope, replay, automation, and conversion features.
Fuzz Faster with Turbo Intruder - Account Bruteforcing and MFA Bypass
Learn to use Turbo Intruder for efficient fuzzing, including account bruteforcing and bypassing MFA timers. Hands-on lab exercises demonstrate practical application of this powerful security testing tool.
Empowerment Through Autonomy - SIG Security Overview and Updates
Explore Kubernetes security initiatives, including documentation, audits, and tooling. Learn about the new Self-Assessments subproject and how to contribute to improving Kubernetes safety.
Linux Essentials for Hackers: File and Directory Permissions - Part 4
Comprehensive guide on Linux file and directory permissions for ethical hackers, covering essential concepts to enhance system security and penetration testing skills.
Securing Kubernetes Clusters: A Collaborative Approach to Self-Assessment
Explore the collaborative security assessment of Kubernetes Cluster API, covering threat modeling, global teamwork challenges, and lessons for future sub-project evaluations across the Kubernetes ecosystem.
Scaling Security Assessment for DevOps - Norad Framework Introduction
Learn to scale security assessments for DevOps with Norad, a distributed testing framework. Automate open-source and vendor tools, aggregate results, and develop custom security tests using the SDK.
Continuous Patch and Security Assessment with InSpec
Discover InSpec: an open-source tool for automated infrastructure security testing. Learn to assess and enforce secure configurations across your IT fleet, integrating with CI/CD for continuous testing.
BtleJuice: The Bluetooth Smart Man-in-the-Middle Framework
Explore BtleJuice, a framework for intercepting and manipulating Bluetooth Low Energy communications. Learn to perform man-in-the-middle attacks, assess device security, and discover vulnerabilities in smart objects.
Bash Scripting for Pentesters
Learn essential Bash scripting techniques for penetration testing, enhancing your cybersecurity skills and automating security tasks effectively.
A Kernel Hacker Meets Fuchsia OS
Explore Fuchsia OS from a security perspective as a Linux kernel expert examines its architecture, design principles, and potential vulnerabilities, offering insights for both developers and security professionals.
Application Security Opportunities and Challenges in a DevOps World
Panel discussion exploring application security challenges and opportunities in DevOps, featuring insights from industry leaders on integrating security into modern development practices.
The Unbelievable Insecurity of the Big Data Stack
Explore new attack vectors in Big Data infrastructure layers, addressing the lack of security assessment methodologies and technical resources for this rapidly growing field.
Automotive Penetration Testing with Scapy
Learn to conduct automotive penetration testing using Scapy, enhancing your skills in identifying and exploiting vulnerabilities in vehicle networks and systems.
Security Assessment of Microsoft DirectAccess
Explore security vulnerabilities in Microsoft DirectAccess, learning assessment techniques and potential exploits to enhance network protection.
Using Ancient Math to Speed Up Security Assessments of Windows Executables
Discover how to accelerate Windows executable security assessments using Euclidean Distance and Bayes Theorem, enabling rapid triage and efficient risk reduction in regulated environments.
For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems
Explore vulnerabilities in mobile point-of-sale systems, including MitM attacks, arbitrary code injection, and firmware exploitation. Learn to identify weaknesses and conduct security assessments in payment technologies.
Aviation Security 101
Explore aviation security vulnerabilities through pen testing research, covering access risks, performance calculations, maintenance mode issues, and potential misunderstandings in the industry.
Introducing the Smartphone Penetration Testing Framework
Comprehensive framework for assessing smartphone security in organizations, covering various attack vectors and providing tools for penetration testing across multiple platforms.
You're Going to Need a Bigger Shovel
Explore software security assurance, application security, and organizational strategies for effective resource planning and process building in cybersecurity.
Topics of Interest - Attacking the Microservice Systems - Methods and Practical Tips
Explore methods and practical tips for attacking microservice systems, focusing on security assessment approaches to identify vulnerabilities specific to this architecture.