The Rise of SaaS-Targeted Malware - Zeus Variant Attacking Salesforce Users
Demonstration of a new Zeus malware variant targeting Salesforce users, showcasing its stealthy data exfiltration capabilities and discussing implications for SaaS security.
Modern Web Application Defense with OWASP Tools
Learn to defend web applications using OWASP tools. Explore XSS, CSRF, and other vulnerabilities through live demos. Gain practical skills to prevent attacks and secure your applications effectively.
My Terrible Roommates - Discovering the FlowFixation Vulnerability and the Risks of Sharing a Cloud Domain
Unveiling FlowFixation: High-severity cloud vulnerability affecting shared domains. Explore risks, prevention methods, and the importance of the public suffix list in cloud security.
Hacking Web Applications - Attacking Authentication
Learn techniques for attacking authentication in web applications through live demonstrations and practical examples.
PuttyRider - Pivoting from Windows to Linux in a Penetration Test - DefCamp - 2014
Explore pivoting techniques from Windows to Linux in penetration testing using PuttyRider. Learn session hijacking, architecture, and functions through a practical demonstration.
Web Security And You
Comprehensive overview of web security vulnerabilities, including XSS, CSRF, and SQL injection, with code examples and practical solutions for protecting websites.
ARP Vulnerabilities - Indefensible Local Network Attacks
Explore ARP vulnerabilities, attack types, and countermeasures in local networks. Learn about sniffing, session hijacking, denial of service, and protective strategies for network security.
Appsec TLDR
Explore web application security essentials, including browser proxies, HTTP requests, cookies, and common vulnerabilities like XSS and SQL injection. Learn attacker mentality and defense strategies.
Unlocking the Gates: Hacking Industrial Remote Access Solutions
Dive into the vulnerabilities of industrial VPN gateways, exploring security flaws in remote access solutions and learning techniques to identify and understand potential system compromises.
Understanding Authentication Bypass Vulnerabilities in Industrial VPN Gateways
Dive into industrial VPN gateway vulnerabilities through detailed analysis of security flaws, session hijacking risks, and hardware security bypass techniques in remote access systems.
Bypassing Modern Authentication Methods for SSO - A Beginner's Guide
Explore passwordless authentication weaknesses, WebAuthn fundamentals, and attack tactics to bypass authentication. Learn credential theft from federation providers and get mitigation suggestions.
Black Hat Europe 2022
Black Hat Europe 2022