Taking Down Applications with Logic - DEF CON 31
Dive into advanced application security techniques and learn how logical vulnerabilities can be exploited to compromise web applications, demonstrated through real-world examples.
Beginner's Guide to Hacking IoT Devices - Building Your First IoT Security Testing Lab
Discover practical IoT hacking techniques, from selecting beginner-friendly devices to building an affordable toolkit under $100. Learn common vulnerabilities and methods to gain device access using simple tools and tactics.
Behind Enemy Lines: Engaging and Disrupting Ransomware Web Panels
Dive into advanced strategies for infiltrating and disrupting ransomware operations by targeting their web panels, APIs, and command centers while gathering vital intelligence on threat actors.
Top War Stories from Bug Bounty Hunting - High-Severity Exploits and Discoveries
Dive into real-world bug bounty hunting experiences, exploring high-severity vulnerabilities worth $10k-$60k, from simple RCE exploits to complex PII leakages, with detailed technical insights and lessons learned.
Exploiting Bluetooth Vulnerabilities: From Car Systems to Bank Account Security
Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicles and flight systems, using BlueToolkit framework for testing, with practical tips and new attack vectors for security research.
Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana
Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.
The Darkest Side of Bug Bounty - Understanding Problems and Solutions in Bug Bounty Programs
Uncover the hidden challenges, secrets, and realities of bug bounty programs through expert insights on navigating relationships between hunters, clients, and platforms.
Practical Exploitation of DoS in Bug Bounty Programs
Discover practical techniques for identifying and exploiting DoS vulnerabilities in bug bounty programs, covering N+1 errors, GraphQL crashing, and Cache Poisoning with real-world examples and responsible reporting practices.
Reflections on a Decade in Bug Bounties - From Novice to Seasoned Hunter
Gain insights into the evolution of bug bounty hunting through a decade-long journey, from basic vulnerability reporting to crafting critical impact chains, with perspectives from both hunter and triage sides.
Comprehensive Analysis of Modern Satellite Vulnerabilities and Emerging Attack Surfaces
Explore modern satellite security vulnerabilities and emerging attack vectors, examining critical infrastructure risks and defensive strategies for protecting space-based systems.
Как оградить себя от плохих зависимостей
Узнайте эффективные методы и инструменты для контроля и управления зависимостями в продуктах, защищая проекты от потенциально вредных компонентов.
Automated Scanning and Vulnerability Assessment of Web Applications
Leverage tools and frameworks to identify security loopholes, perform penetration testing, and ensure web application resilience against potential attacks.
Definitive Security Testing Checklist - Shielding Your Applications Against Cyber Threats
Unveil a comprehensive security testing checklist to fortify applications against vulnerabilities and attacks, enhancing protection from sophisticated cyber threats.
Hacking Kubernetes: Live Demo Marathon
Witness live demonstrations of Kubernetes hacking techniques and learn essential security practices to protect your containerized environments.
DNS and Attack Surface Management
Explore DNS management and attack surface reduction techniques. Learn to secure internet-facing systems, implement DMARC, and leverage free vulnerability assessments for enhanced brand protection.
Enhancing Cyber Resilience Through Zero Trust Chaos Experiments in Cloud Native Environments
Explore Zero Trust Chaos Experiments to uncover vulnerabilities and enhance cyber resilience in cloud-native environments. Learn strategies to detect and mitigate cyber threats through simulated disruptions.
ADillesHeel - Making the Impossible Possible in AD Attack Path Analysis
Innovative approach to AD attack path analysis, overcoming limitations and enhancing security through advanced techniques and methodologies.
The Dark Side of AI: Hidden Supply Chain Risks in Open-Source AI Models
Explore security vulnerabilities in open-source AI models, including live demonstrations of exploits and techniques for embedding malicious code and data poisoning.
Continuous Security with HackerOne Bug Bounty - Cyber Defense Done Right
Leverage the world's largest ethical hacker community for proactive, continuous testing of digital assets. Custom-tailored bug bounty programs connect you with top security researchers to uncover novel vulnerabilities in your systems.
Hidden Risks in Open-Source Code and AI Models
Explore vulnerabilities in AI models and open-source code, including a live demo of potential exploits. Learn about software supply chain security and strategies to protect against malicious attacks.
Understanding Exploitability with VEX, EPSS, and Other Standard Frameworks
Explore key frameworks for assessing software vulnerabilities, including VEX, EPSS, CVSS, and SBOMs. Learn to enhance security through automated policy and GitOps practices.