Building Secure Software With OWASP Tools and Guides
Explore OWASP's comprehensive tools and guides for building secure software throughout the development lifecycle, from policy creation to implementation and verification.
DevSecOps with OWASP DevSlop
Learn DevSecOps through hands-on examples with OWASP DevSlop. Explore secure component management, secret handling, testing techniques, and open-source tools to enhance your pipeline security.
OWASP Standard Classification - Achieving Security by Shifting Left in Agile
Integrating security into Agile development through persona-based stories, prioritization, and testing strategies to create more secure web applications and shift security left in SDLC.
Topics of Interest - React Native Security - Addressing Typical Mistakes
Explore React Native security, common pitfalls, and best practices. Learn to address risks, manage permissions, detect jailbreaks, and implement secure storage in mobile app development.
Don't Have a Meltdown - Practical Steps for Defending Your Applications
Practical steps to defend applications against common attacks, covering authentication, injection, updates, sensitive data, and configuration. Learn to mitigate key security risks in containerized environments.
The Little Phone That Could Ch-ch-chroot
Explore cost-effective Red Team tactics using a covert disposable phone for reconnaissance, including device rooting, functionality, and anti-forensics techniques.
Understanding the IoT Threat Landscape
Explore IoT threat landscape, malware analysis, and Panasonic's approach to developing resilient products and an IoT SOC. Learn about security testing and the IoT Intelligence Platform.
Drone Penetration Testing and Vulnerability Analysis Framework
Explore an open-source framework for drone security testing, covering attack types and vulnerability analysis. Learn to assess and enhance drone safety in various applications.
SecDevOps - A Security Pro's Guide to Development Tools
Guía para profesionales de seguridad sobre herramientas de desarrollo, enfocada en empatía, integración de seguridad y métricas para mejorar la colaboración entre equipos de seguridad y desarrollo.
Planning and Executing a Red Team Engagement
Planning and executing a red team engagement: strategies, tools, and techniques for simulating real-world cyber attacks to assess and improve an organization's security posture and incident response capabilities.
LoRaWAN Auditing
Comprehensive guide to LoRaWAN security auditing, covering vulnerabilities, testing methods, and new tools. Provides practical insights for securing IoT deployments in smart cities and industries.
There Will Be Glitches - Extracting and Analyzing Automotive Firmware Efficiently
Explore automotive firmware extraction and analysis techniques, focusing on fault injection and emulation for uncovering vulnerabilities in vehicle security systems.
Broadcasting Your Attack - Security Testing DAB Radio in Cars
Explore vulnerabilities in DAB radio systems in cars, potential security risks, and implications for automotive cybersecurity using Software Defined Radio and custom testing tools.
Attacking SDN Infrastructure - Are We Ready for the Next-Gen Networking?
Exploring SDN vulnerabilities through attacks on control plane, channel, and data plane. Demonstrates critical exploits affecting network availability and confidentiality, and introduces SDN security projects.
Drawing the Map - Outlining Android Permissions Mechanism
Explore Android permissions mapping methodologies, their importance for security, and the need for a centralized approach led by Google to enhance mobile app development and testing.
DevSecOps Security Testing with CICD Automation Servers
Learn to integrate security testing into DevOps workflows using CI/CD automation servers, enhancing software development processes and improving overall security posture.
Fuzzing the Stack for Fun and Profit
Explore stack fuzzing techniques for vulnerability discovery and exploitation in this hands-on talk from DefCamp 2019, covering the latest research and practices in information security.
OSSTMM - The "Measure, Don't Guess" Security Testing Methodology
Explore the OSSTMM security testing methodology, emphasizing precise measurement over guesswork. Learn practical approaches to enhance your organization's information security practices.
VoIP Wars - The Phreakers Awaken
Explore cutting-edge VoIP attacks, vulnerabilities, and security testing techniques for modern unified communications, with focus on cloud-based solutions and enterprise networks.
Security Testing for Smart Metering Infrastructure
Comprehensive guide to security testing for smart metering infrastructure, covering threat vectors, test plans, and best practices for AMI projects and production transitions.
P4wnP1 A.L.O.A. - Kleine Schweinereien mit dem Raspberry Pi Zero W
Entdecken Sie die Sicherheitslücken von Computern durch kreative Nutzung des Raspberry Pi Zero W. Lernen Sie, wie man unbemerkt Zugriff erlangt und Systeme manipuliert.