Unguard: An Open Source Application Security Playground
Explore Unguard, an open-source Twitter clone with deliberate vulnerabilities. Learn how Dynatrace detects web application exploits using this security playground for testing and demonstration.
Metasploit
Learn Metasploit for ethical hacking: modules, exploits, payloads, information gathering, web server hacking, privilege escalation, and more. Hands-on tutorials for beginners to advanced users.
SecurityTube Metasploit Framework Expert Community Edition
Comprehensive training on Metasploit Framework, covering advanced techniques and strategies for penetration testing and ethical hacking. Gain expertise in this powerful cybersecurity tool.
Burp Suite - Basic Concepts for Web Pentesting
Learn essential web pentesting techniques using Burp Suite, covering parameter passing, code injection, XSS, LFI/RFI attacks, and SQL injection for effective security testing of web applications.
OWASP SAMM Approach: Creating Secure Applications from Scratch
Explora el Modelo de Madurez de Seguridad de Aplicaciones de OWASP (SAMM), una metodología para crear aplicaciones seguras desde la planificación hasta el mantenimiento continuo.
Heapster- Analyzing the Security of Dynamic Allocators for Monolithic Firmware Images
Explore Heapster's innovative approach to analyzing dynamic allocators in monolithic firmware, enhancing security through advanced identification and evaluation techniques.
Bug Bounty Field Manual - Cliff Notes for Planning and Operating Successful Programs
Comprehensive guide on planning, launching, and operating successful bug bounty programs, covering team formation, scope setting, bounty structures, and program management strategies.
Demystifying Program Management in Crowdsourced Security
Explore expert program management in crowdsourced security testing, focusing on bug bounties and vulnerability disclosure. Learn key strategies for successful implementation and management.
What is Access Control and How Can You Break It?
Explore types of access control and techniques to exploit vulnerabilities, enhancing your understanding of cybersecurity and potential system weaknesses.
Live Hacking Events - What They Are and How They Work
Explore Live Hacking Events with HackerOne's Community Team. Learn about these unique cybersecurity gatherings, their benefits, and how to participate in this exciting hacking format.
What Should You Do After Recon?
Strategies for effective bug hunting after reconnaissance: prioritizing targets, analyzing attack surfaces, and tailoring your approach for maximum impact in bug bounty programs.
Pentesting for Developers - Common Vulnerabilities and Prevention Techniques
Learn essential pentesting techniques for developers, covering common web vulnerabilities, prevention methods, and tools to secure your applications effectively.
Why Has Your Toaster Been through More Security Testing than AI Systems
Exploring the lack of standardized security testing for AI systems in critical sectors, contrasting with rigorous certifications for everyday appliances and traditional software.
Running FaaS with Scissors - DevSecOps and Serverless Security Testing - 2019
Explore DevSecOps and FaaS technologies to enhance secure code creation, utilizing OpenFaaS for faster, more consistent security assessments and continuous testing with quick feedback loops.
Information Disclosure
Explore various techniques for identifying information disclosure vulnerabilities, a diverse and intriguing category of security bugs with wide-ranging technical complexity.
Bridging the Air Gap: Cross-Domain Solutions - PG08
Explore cross-domain solutions for secure data transfer between networks, including examples, security testing, and future developments in bridging air-gapped systems.
Threat Models for Exercising SIEM and Incident Response
Explore effective threat modeling techniques to enhance SIEM and incident response capabilities, improving overall cybersecurity preparedness and resilience.
Terminal Cornucopia: Demystifying The Mullet - Lecture 4
Explore innovative security vulnerabilities in airport terminals and learn about unconventional weapon creation using everyday items, as demonstrated by security researcher Evan Booth.
Hackers vs Auditors: Cybersecurity Perspectives
Explore the dynamic between hackers and auditors, examining their roles, motivations, and interactions in the cybersecurity landscape.
Target-Specific Automated Dictionary Generation - BSidesLV 2014
Generate targeted password dictionaries using automated techniques for more effective penetration testing and security assessments.
Succeeding with Enterprise Software Security Key Performance Indicators
Learn to implement and measure effective enterprise software security KPIs. Discover strategies for aligning security goals with organizational objectives and improving development processes.