Hacking and Defending APIs - Red and Blue Make Purple
Comprehensive guide to API security: attack techniques, defense strategies, and best practices for both testers and defenders. Covers BOLA, authentication, data exposure, and more.
Design-Level Supply Chain Attacks in the Real World
Explore design-level supply chain attacks, including environmental constraints, compatibility issues, and malicious influence. Learn to identify and mitigate these often-overlooked vulnerabilities in cybersecurity.
Practical SMEP Bypass Techniques
Explore practical techniques for bypassing Supervisor Mode Execution Prevention (SMEP) in system security, enhancing your understanding of kernel exploitation and protection mechanisms.
Crash and Pay - Owning and Cloning NFC Payment Cards
Explore vulnerabilities in NFC payment cards, including techniques for cloning and exploiting weaknesses in contactless payment systems.
Securing Legacy Applications: Tips and Tricks for Refactoring
Discover and fix security issues in legacy applications with practical tips and tricks. Learn to identify common vulnerabilities and refactor code for enhanced security.
Pentesting for Developers - Common Vulnerabilities and Prevention Techniques
Learn essential pentesting techniques for developers, covering common web vulnerabilities, prevention methods, and tools to secure your applications effectively.
Mobile Security Testing and Penetration Techniques - 2017 Keynote
Insightful keynote address exploring cutting-edge cybersecurity trends, challenges, and innovations in the rapidly evolving digital landscape.
AI for Cybersecurity - Overview of the Field and Promising Future Directions
Explore AI applications in cybersecurity, including threat intelligence and adversarial machine learning. Learn about data sources, limitations, and future directions in this field.
OWASP Top 10 Training - Part 3
Comprehensive exploration of OWASP Top 10 security vulnerabilities, focusing on prevention strategies and best practices for web application security.
OWASP Top 10 Training - Part 1
Comprehensive overview of OWASP Top 10 security vulnerabilities, focusing on identification, prevention, and mitigation strategies for web application developers and security professionals.
OWASP Top 10 Security Risks - Part 5
Explore the latest OWASP Top 10 security vulnerabilities, their impact, and effective mitigation strategies to enhance web application security and protect against common threats.
Easy Mobile Hacking: Native and Hybrid Pitfalls - 2016
Uncover common vulnerabilities in mobile apps, both native and hybrid, using free tools. Learn to identify and exploit configuration weaknesses across Android and iOS platforms.
Armitage and Metasploit for Penetration Testing - From Information Collecting to Post Exploitation
Comprehensive overview of Armitage and Metasploit for penetration testing, covering information gathering, exploitation, and post-exploitation techniques through live demonstrations and practical examples.
CeH Unit 1 - Business Aspects of Penetration Testing
Explore business aspects of penetration testing, including key terms, threats, data protection, and security procedures. Learn about ethical hacking and its role in cybersecurity.
Introduction to Metasploit - Network Exploitation Lab
Learn essential Metasploit techniques for network security, including scanning, exploiting vulnerabilities, and establishing reverse shells in this hands-on lab.
Security Scan with Nessus - Comprehensive Guide
Learn to perform security scans using Nessus, covering policy creation, scanning techniques, and interpreting results for various systems including web servers and Windows.
Getting Started with Command Injection
Learn to exploit Command Injection vulnerabilities with a comprehensive guide covering theory, code review, and hands-on labs to enhance your cybersecurity skills and understanding of this dangerous vulnerability.
Vulnerability Assessments on SCADA Systems: How I Owned the Power Grid - Lecture 3
Explore SCADA system vulnerabilities and learn how power grids can be compromised through real-world examples and expert insights on cybersecurity in critical infrastructure.
Hacking to Get Caught: A Concept for Adversary Replication and Penetration Testing - Lecture 11
Explore adversary replication and penetration testing techniques for improved cybersecurity. Learn strategies to simulate real-world attacks and enhance defensive capabilities.
Inside the World's Most Dangerous Search Engine - Shodan
Explore the inner workings and potential risks of a powerful search engine with insights from its creator, delving into cybersecurity implications and technological advancements.
Terminal Cornucopia: Demystifying The Mullet - Lecture 4
Explore innovative security vulnerabilities in airport terminals and learn about unconventional weapon creation using everyday items, as demonstrated by security researcher Evan Booth.