CyberRange - An Open-source Offensive Security Lab In AWS
Learn to create a private AWS security training lab using SecDevOps-Cuse/CyberRange. Explore automation, vulnerability management, and offensive security in a safe cloud environment.
Spear Phishing - From Linkedin To Loggedin
Explore the rise of spear phishing, learn to identify vulnerable targets through social media, and discover effective protection strategies for individuals and organizations.
Inside Magecart - Their Web Skimming Tactics Revealed
Explore Magecart's evolution, tactics, and techniques in compromising e-commerce sites for credit card skimming. Learn about high-profile breaches and the criminal underworld behind this cybercrime phenomenon.
Offensive Pcap
Explore libpcap for offensive security: bypass firewalls, intercept traffic, manipulate network connections, and evade detection. Hands-on techniques with source code provided.
They are the Champions - How To Build and Maintain an Effective Cybersecurity Champion Programme within your Organisation
Maximizing security awareness through a champions program: scaling up, improving communication, enhancing security cost-effectively, and boosting incident reporting. Aligning with company culture for effective implementation.
We Take Your Security Seriously. Or Do We?
Humorous exploration of data protection practices, contrasting organizations' claims with real-world breaches. Offers insights on improving security measures while highlighting both progress and challenges.
AWS Vs Azure Security
Comparative analysis of AWS and Azure security features, exploring identity management, storage, encryption, network security, and monitoring capabilities in both cloud platforms.
The Imitation Game - Emulating Attackers
Explore realistic attacker emulation using CALDERA, implementing techniques, modeling groups, and executing end-to-end attack paths to improve defenses and investigate new threats.
Password Cracking - The First 500 Million
Explore advanced password cracking techniques, hash preprocessing tools, and best practices for secure hashing. Learn to prevent credential stuffing and analyze real-world password dumps.
The Green Padlock of Doom, or Why No One Trusts Us Anymore
Exploring trust issues in technology, focusing on DNS and HTTPS/TLS systems. Analyzes how security measures often fail to protect average users, proposing ways to improve online safety for all.
State of The Net
Explore the rapid evolution of technology, our growing dependence on digital devices, and the cybersecurity challenges that arise as connected devices proliferate.
How to Take Over a Production System in the Cloud
Explore real-world cloud security vulnerabilities, their root causes, and effective mitigation strategies through examples and demonstrations. Learn to protect your cloud systems from potential threats.
Travel with Underground Services - Ecosystem Exposed
Explore the hidden world of cybercriminal travel services, uncovering underground agencies, fraud schemes, and vulnerabilities in the hospitality industry.
The Insider - Users
Explore insider threats and vulnerabilities in network domains, revealing how standard users can potentially gain full admin access and compromise security within organizations.
Hacking the Drones
Explore drone security vulnerabilities, hacking techniques, and GPS spoofing methods. Learn about UK drone laws and differences between private and military drones.
Breaking into Embedded Devices and IoT Security
Explore tools and techniques for identifying vulnerabilities in embedded devices and IoT, covering common attack vectors, responsible disclosure, and the overlap with OT/ICS security challenges.
Circumventing Egress Filtering by Exploiting HTTP
Exploiting HTTP chunked transfer encoding to bypass egress filtering, enabling faster web shells and network pivoting during red team engagements.
Holy Smokes, How to Vape Yourself to Root
Explore how e-cigarettes can be transformed into covert exploit platforms, including firmware decryption, custom functionality, and system penetration techniques.
Sharing is Not Caring - Proliferation of GitHub Code in Real Attacks
Explore the consequences of open-source malware deployment, analyze attacker toolkits, and learn about defender opportunities in this insightful cybersecurity talk.
Introducing Pi-Key - Hacking Just Like the Movies
Discover Pi-Key: a £20 Raspberry Pi Zero device that steals Windows credentials, cracks them, and unlocks machines in under 60 seconds. Learn how it works, its components, and build your own.
iOS Malware - Myth or Reality?
Explore iOS malware's reality, recent discoveries, and implications for mobile security in this eye-opening talk challenging common perceptions about Apple device vulnerabilities.