The Anatomy of Cloud Attacks
Uncover cloud attackers' tactics and mindsets through honeypot analysis. Learn key defense strategies against threats like Headcrab Kinsing and Teamtnt in this insightful session on cloud security.
JavaScript Files Are Your Friends in Bug Bounty Hunting
Discover hidden endpoints and vulnerabilities by diving deep into JavaScript files. Learn techniques to uncover potential bugs and enhance your bug bounty hunting skills.
Identifying Your Web Attack Surface - RAWR
Learn to identify and assess web application vulnerabilities using the RAWR methodology, enhancing your ability to secure online systems and protect against potential threats.
Applications, Cloud, and Hackers - Security Challenges in Modern Computing - Lecture 1
Explore cloud application security challenges and solutions in this talk, covering threat landscapes, attack vectors, and defensive strategies for modern cloud environments.
Introducing Android Security Evaluation Framework (ASEF)
Explore ASEF, a framework for evaluating Android app security. Learn about its features, implementation, and how it can enhance mobile app protection and vulnerability detection.
Applying Risk Management to Web Application Security
Explore effective risk management strategies for web application security, focusing on practical techniques to identify, assess, and mitigate potential vulnerabilities in online systems.
Web Pen-Testing Workshop - JSON Injection - Part 12
Explore JSON injection techniques in web penetration testing with expert Jeremy Druin. Learn to identify and exploit vulnerabilities in web applications handling JSON data.
Web Penetration Testing Workshop: XSS and BeEF - Part 10 of 12
Explore XSS vulnerabilities and BeEF framework for web penetration testing, enhancing your cybersecurity skills with hands-on techniques and expert insights.
Web Penetration Testing: Remote and Local File Inclusion - Part 6 of 12
Explore remote and local file inclusion vulnerabilities in web applications, learning detection techniques and exploitation methods for enhanced security awareness.
NOWASP Mutillidae 2: A Web Penetration Testing Environment for Secure Development
Explore web penetration testing techniques using NOWASP Mutillidae 2, a comprehensive environment for learning secure development practices and identifying vulnerabilities.
Pen Testing Web 2.0 - The Client Side - Lecture
Learn advanced techniques for penetration testing Web 2.0 applications, focusing on client-side vulnerabilities and exploits to enhance your cybersecurity skills.
Hacking Web Applications - Attacking Authentication
Learn techniques for attacking authentication in web applications through live demonstrations and practical examples.
Web App Wednesday - Exciting XXE Injection
Explore XXE injection techniques for web application security, covering PortSwigger labs and practical hacking scenarios.
OWASP Mobile Application Security - MAS
Comprehensive guide to mobile app security, covering OWASP best practices, threat modeling, and secure development techniques for iOS and Android platforms.
Web2 Meets Web3: Hacking Decentralized Applications
Dive into the security challenges of decentralized applications, exploring real-world vulnerabilities, threat modeling, and attack vectors in both Web2 and blockchain environments.
Command Injection Vulnerabilities in CI/CD Pipelines - Securing Bazel GitHub Actions
Discover critical security vulnerabilities in CI/CD pipelines through a case study of Bazel GitHub Action, learning practical strategies to protect your projects from command injection attacks.
Exploiting Bluetooth Vulnerabilities: From Vehicle Systems to Bank Account Access
Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicle systems using BlueToolkit, exploring real-world security implications and practical attack vectors in automotive and aviation contexts.
KubeClarity - Bringing Clarity to Kubernetes Artifacts Security
Discover how KubeClarity enhances security for Kubernetes artifacts, providing comprehensive visibility and protection for your cloud-native applications.
Komrade: An Open-Source Security Chaos Engineering Tool for Kubernetes
Explore Security Chaos Engineering (SCE) and its application in Kubernetes with Komrade, an open-source tool for proactively identifying system vulnerabilities through controlled experiments.
Cloud Native Live - Litmus Chaos Engine and Microservices Demo App
Explore Litmus Chaos Engine for resilience testing in microservices, featuring a hands-on demo application to enhance cloud-native development skills.
How Attackers Use Exposed Prometheus Servers to Exploit Kubernetes Clusters
Explore how attackers exploit exposed Prometheus servers to gather sensitive information for fingerprinting Kubernetes clusters, and learn strategies to secure your infrastructure against these threats.