Decentralized C2 Using LogDrop - Exploiting Web Server Misconfigurations
Descubre LogDrop, una técnica innovadora para establecer canales de comando y control aprovechando errores de configuración en servidores web. Aprende sobre ciberseguridad y nuevas estrategias de Red Team.
Finding and Exploiting Hidden Functionality in Windows DLLs - LevelUpX Series 14
Explore hidden Windows DLL functionality, common bug patterns, and exploitation techniques for bug bounty hunters. Learn tools and methods to uncover vulnerabilities in web servers and network services.
What Happens When Your Web Server Private Key Is Leaked?
Explore the risks of leaked web server private keys, understanding their role in TLS protocols, digital signatures, and best practices for key management and rotation.
Nginx ModSecurity Tutorial - Nginx WAF
Learn to secure Nginx with ModSecurity, an open-source web application firewall. Explore real-time request inspection, protection against XSS and SQL injection attacks, and active monitoring for enhanced web server security.
Python Django Tutorial - How to Enable HTTPS with a Free SSL-TLS Certificate Using Let's Encrypt
Learn to enable HTTPS on your Django web server using Let's Encrypt's free SSL/TLS certificate. This tutorial covers installation, configuration, and troubleshooting for secure web hosting.
Linux Security - Securing Nginx
Comprehensive guide to securing Nginx on Linux servers, covering setup, configuration, and auditing best practices for enhanced web server protection.
HTTP Time Bandit - Identifying Web Application Performance Bottlenecks
Explore web application vulnerabilities and efficient DOS/DDOS attack techniques using HTTP Time Bandit tool. Learn to identify resource-consuming pages for improved security or targeted attacks.
Server-Side Prototype Pollution: Detection and Exploitation Techniques - OWASP AppSec Dublin
Explore server-side prototype pollution vulnerabilities, detection techniques, and prevention strategies in web applications with security expert Gareth Heyes.
Topics of Interest - Common NGINX Misconfigurations That Leave Your Web Server Open To Attack
Explore common NGINX misconfigurations, their security implications, and remediation strategies. Learn to identify and fix vulnerabilities in web server setups through demos and expert insights.
Compromising Web Servers and Defensive Techniques
Explore web server vulnerabilities and learn defensive strategies to protect against common attacks and security breaches in this comprehensive cybersecurity presentation.
HTTP Fingerprinting and Advanced Assessment Techniques
Explore advanced HTTP fingerprinting techniques and assessment methods for enhanced web security and vulnerability detection.
Hacking IIS
Explore advanced IIS hacking techniques, including HTTPAPI 2.0 assets, VHost hopping, local file disclosure, and complex XXE vectors. Learn to leverage tools like DNSpy for effective web application security testing.
Defending Windows 2000 on the Internet
Explore strategies for securing Windows 2000 systems on the internet, covering architecture, configurations, and best practices to defend against common attacks and vulnerabilities.
Securing Tomcat: Key Considerations and Best Practices
Learn key security considerations, features, and best practices for securing Tomcat, a widely-used Java-based web server and servlet container.
Black Hat USA 2025
Black Hat USA 2025