Introduction to Reversing and Pwning
Explore reverse engineering and exploitation techniques, covering low-level programming, memory vulnerabilities, and essential tools for cybersecurity enthusiasts and professionals.
IATC - HHS Task Force
Explore cybersecurity challenges in healthcare with insights on task forces, device manufacturing, disclosure programs, and legacy systems from industry expert Josh Corman.
Tired of Playing Exploit Kit Whack-A-Mole? Let's Automate
Explore automated detection of Exploit Kits using headless browsers, JavaScript, and DOM inspectors for efficient web crawling and analysis of malware delivery techniques.
Freaky Leaks from a Chic Geek
Explore leakware, data breaches, and vulnerabilities. Learn to identify risks, share threat intelligence, and protect assets using OWASP Top Ten 2017. Discover real-world examples and strategies for improved cybersecurity.
A Look at TR-06FAIL and Other CPE Configuration Disasters
Exploring TR-06FAIL and CPE vulnerabilities: impacts, related issues, and potential for mass router takeovers through TR-069 protocol implementations.
Cyber by Any Other Name Would Smell as Insecure - The Language of Security
Exploring the evolving language of cybersecurity, its impact on communication, and the importance of effective terminology in reaching diverse audiences and promoting understanding.
Getting Better with Data
Learn data-driven strategies to streamline network monitoring, reduce alert fatigue, and optimize your time. Discover tools and processes for effective business intelligence and dashboard creation.
Docker - Security Myths, Security Legends
Explore Docker's security implications, debunking myths and highlighting real benefits for containerization, with practical insights on implementation and best practices.
Open Source Malware Lab
Explore open-source tools for malware analysis, including Cuckoo Sandbox, Thug, Bro Network Security Monitor, and Volatility Framework. Learn to build an automated lab for comprehensive threat assessment.
Intelligence Led Penetration Testing
Explore intelligence-led penetration testing using threat intel and OSINT to create bespoke, realistic assessments that mimic real-world attack techniques and toolkits.
Elliptic Curve Cryptography for Those Who Are Afraid of Maths
Demystifying Elliptic Curve Cryptography: Learn the basics, understand its importance in data protection, and grasp the concept of point addition on curves for secure key exchange without delving into complex mathematics.
Why Bother Assessing Popular Software
Explore assessing popular software like Adobe Reader, discussing fuzzing, sandboxes, and JavaScript APIs. Learn approaches for complex targets and making a security impact.
How Google Turned Me into My Mother - The Proxy Paradox in Security
Exploring the challenges of digital delegation and proxy activities in security, highlighting the need for improved IAM models to address real-world representation scenarios.
Penetration Testing Must Die
Explore the limitations and challenges of penetration testing in cybersecurity, discussing its effectiveness, terminology issues, and potential alternatives for improving security assessments.
Cloud Computing
Explore cloud computing risks, certifications, and security considerations with insights on virtualization and the Cloud Security Alliance.
Practical Crypto Attacks Against Web Applications
Explore practical crypto attacks on web apps, covering ECB and CBC modes, block swapping, padding oracles, and signed cookies. Gain insights into vulnerabilities and defense strategies.
Social Media & Security
Explore the evolving landscape of online security, from email spam to social media threats, and learn strategies to protect yourself in the digital age.
Breaking Binary Protocols and Bad Crypto
Explore reverse-engineering techniques for binary protocols and cryptography, focusing on methodologies to uncover vulnerabilities in network devices through real-world examples.
RATs and IOCs - The Easy Way
Explore techniques for extracting and analyzing Remote Access Trojan (RAT) configurations, focusing on static analysis methods and utilizing the extracted data for threat intelligence and defense.
Defensive Security Research is Sexy Too - Real Sign of Skill
Explore defensive security research's importance, goals, and applications across tech levels. Discover past challenges, current solutions, and future opportunities in this critical field.
TOR - Attacks and Countermeasures
Explore Tor's anonymization network, hidden services, and censorship bypass. Learn about attacks, countermeasures, and real-world cases like Silk Road takedown and FBI's deanonymization techniques.