My Making of a Metasploit Module
Learn to create and contribute a Metasploit module, covering directory structure, basic module development, Git commands, testing, and the pull request process.
Could Static Code Analysis and Secure Coding Have Saved the Death Star
Explore how static code analysis and secure coding practices could have prevented the Death Star's destruction, using Star Wars as a fun analogy for cybersecurity principles.
Standardizer - A Standardization Framework for Your Security Alerts
Learn about Standardizer, a framework for security alert standardization, covering metadata, core data, transformations, and application processes.
Modern AppSec Gotchas
Explore 12 modern application security challenges and learn effective prevention strategies for web developers and security professionals.
Automating Windows Kernel Analysis With Symbolic Execution
Explore automated Windows kernel analysis using symbolic execution techniques for enhanced security and vulnerability detection.
Stable 00 Bypassing MacOS Detections With Swift
Learn techniques for bypassing macOS detections using Swift, including command-line processes, API calls, and sandbox manipulation, with practical examples and developer insights.
Using Next Generation Fuzzing Tools - Fixing Bugs and Writing Memory Corruption Exploits
Explore next-gen fuzzing tools for bug fixing and memory corruption exploits. Learn about product security assessment, constraint solvers, and web scanning techniques.
Inter-Chip Communication - Testing End to End Security on IoT
Explore IoT security testing with a focus on inter-chip communication, using a smart lock as a case study. Learn practical techniques for analyzing and securing IoT devices.
Stable 26 - Are You Ready to Leverage DevSecOps - Get Ready and Use It for Good
Leverage DevSecOps effectively: Learn about software lifecycle, integration, training, and security best practices for developers and teams.
Metasploit Town Hall - Redubbed
Explore the latest developments and community insights in Metasploit, the popular penetration testing framework, during this informative town hall session from DerbyCon 9.0.
Symbolically Executing a Fuzzy Tyrant
Explore symbolic execution and fuzzing techniques for software security analysis, focusing on practical applications and advanced methodologies.
Zoom Zero Day - How Not to Handle a Vulnerability Report
Explore the mishandling of a Zoom vulnerability report, examining the consequences and lessons learned for improved cybersecurity practices and responsible disclosure.
Practical Crypto Review for Developers
Comprehensive review of practical cryptography for developers, covering essential concepts and implementation techniques for secure software development.
Lessons Learned Implementing SDLC and How To Do It Better
Insights on implementing SDLC effectively, covering management buy-in, security awareness, threat modeling, code review, and testing for better software development practices.
Code Hedgehogs - Changing the S in SDLC to Secure
Explore secure software development through a gamified approach, learning about vulnerabilities, threat modeling, and building secure coding skills with a unique hedgehog-themed perspective.
Engineering Code Obfuscation
Explore techniques for engineering code obfuscation to protect software from reverse engineering and tampering. Learn strategies to enhance program security and intellectual property protection.
Differential Computation Analysis - Hiding Your White Box Designs Is Not Enough
Explore differential computation analysis for white-box cryptography, covering attack models, implementations, code lifting, and visualization techniques to enhance security measures.
Software Implementation of Koblitz Curves Over Quadratic Fields
Explore efficient software implementation of Koblitz curves over quadratic fields, covering storage techniques and interleaving for enhanced performance.
Patchable Indistinguishability Obfuscation iO for Evolving Software
Explore indistinguishability obfuscation for evolving software, focusing on patchable techniques, multi-program applications, and cryptographic implications in this advanced cryptography presentation.
How Fast Can Higher Order Masking Be in Software
Explore efficient higher-order masking techniques in software implementations for enhanced cryptographic security against side-channel attacks.
Workshop on Attacks in Crypto 2020 Session III and Keynote
Explore vulnerabilities in Moscow's Internet voting and learn methodologies for creating leakage-resilient software implementations in cryptography.