Assessing the Embedded Devices On Your Network
Explore embedded device security challenges, threat modeling, and assessment techniques through a VoIP phone case study. Learn hardware tricks, debugging methods, and potential mitigations for vulnerabilities.
How to Get the Most Value out of Your Penetration Test
Maximize penetration test value: Learn strategies for internal buy-in, aligning with business goals, choosing testers, and evaluating results. Gain practical insights from industry expert Ed Skoudis.
The IoT Hacker's Toolkit
Explore essential hardware and software tools for IoT security assessment, covering interfaces, analysis techniques, and skill-building for embedded device evaluation.
Like Lightning From the Cloud - Finding RCEs in an Embedded TLS Library
Explore techniques for discovering remote code execution vulnerabilities in embedded TLS libraries, with insights on improving security in IoT and embedded systems.
AutoSpear - Towards Automatically Bypassing and Inspecting Web Application Firewalls
Explore techniques for automatically bypassing and inspecting web application firewalls, examining vulnerabilities in WAF-as-a-service solutions and cloud security services.
HTTP Fingerprinting and Advanced Assessment Techniques
Explore advanced HTTP fingerprinting techniques and assessment methods for enhanced web security and vulnerability detection.
Manufactorum Terminatus - The Attack and Defense of Industrial Manufacturers
Explore strategies for attacking and defending industrial manufacturers, focusing on cybersecurity challenges and solutions in the manufacturing sector.
OSSTMM - The "Measure, Don't Guess" Security Testing Methodology
Explore the OSSTMM security testing methodology, emphasizing precise measurement over guesswork. Learn practical approaches to enhance your organization's information security practices.
Attacking Wide Scopes
Explore techniques for attacking wide-scope targets in bug bounty programs. Learn strategies to identify vulnerabilities and maximize your impact when dealing with extensive attack surfaces.
Into the Core - In-Depth Exploration of Windows 10 IoT Core
Explore Windows 10 IoT Core internals, security features, attack surfaces, and assessment methods. Learn to secure IoT devices and understand their role in the evolving Internet of Things landscape.
Scrutinizing WPA2 Password Generating Algorithms in Wireless Routers
Explore WPA2 password generation algorithms in wireless routers, uncovering vulnerabilities and improving network security through in-depth analysis and practical insights.
Automation of Penetration Testing and the Future
Explore the future of automated penetration testing, its impact on the industry, and strategies for adapting to evolving cybersecurity challenges.
WebRTC Security - Is Web-Based Peer-to-Peer Ready for Primetime?
Explore WebRTC security, architecture, and challenges in web-based peer-to-peer communication. Gain insights into deployment scenarios, potential weaknesses, and open security issues in this emerging technology.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and actionable solutions to protect your APIs from unauthorized access and account compromises.
Matrix - Open, Secure, Decentralised, Real-Time Communication Across Networks
Explore Matrix: an open, secure, decentralized communication protocol. Learn key features, architecture, encryption, implementations, integrations, and real-world applications for cross-network messaging.
Owning Electronic Locks Without Leaving A Trace
Unveiling vulnerabilities in widely-used electronic locks, demonstrating potential for undetectable breaches. Explores implications beyond hotel security, offering insights into long-term research and ethical hacking.
Physics of Security
Exploring IC reverse engineering techniques for security assessment, including failure analysis tools, delayering methods, and circuit editing. Learn how to analyze and modify chip structures for hardware hacking.
Attacking Industrial Remote Controllers
Exploring vulnerabilities in industrial RF remote controllers, revealing security flaws and potential attacks. Includes demos, findings, and recommendations for improving safety in IIoT applications.
iNalyzer - No More Blackbox iOS Analysis
Discover iNalyzer, an open-source framework for iOS app security assessment. Learn how it transforms the app into a testing tool, enabling efficient server-side attacks and overcoming traditional analysis limitations.
Internet-Scale Analysis of AWS Cognito Security
Reveals findings from large-scale AWS Cognito security analysis, exposing vulnerabilities in identity pools granting access to thousands of S3 buckets, DynamoDB tables, and Lambda functions.
Realizing Software Security Maturity - The Growing Pains and Gains
Explore software security maturity stages, from low to high, and learn strategies for building effective application security programs with practical insights and metrics.