Join us for an in-depth exploration in 'Sharpening Your Skills: Web PenTesting with SamuraiWTF,' where we dive into the techniques and tools for web application security. This talk is specially designed for those eager to elevate their web penetration testing skills using the OWASP Samurai ...
In a world where web applications are the new battleground. Hackers are constantly looking for ways to exploit them and steal your secrets, sabotage your network, or harm your customers. But you are not alone... Jennifer Shannon is here to help you fight back. In ...
In this free one-hour Antisyphon Anti-Cast, Gerard Johansen, Principal Readiness Engineer for Red Canary and Antisyphon instructor, will run through how threat actors use the Windows Management Instrumentation (WMI) for Lateral Movement and Persistence. Gerard will walk through how threat actors use WMI, what trace ...
In every cloud, Identity and Access Management are incredibly challenging for the most skilled practitioners. In this free one-hour Antisyphon Anti-Cast we’ll review different cloud provider identity and access paradigms, look at the systems for granting access, and where the pitfalls are. We’ll review the ...
If you want to master the art of penetration testing, you need to know how to exploit Active Directory (AD). It's the backbone of most networks and it holds the keys to the kingdom. But cracking it is not always easy. You need to use ...
The Linux-guru, Hal Pomeranz, returns for a free one-hour Antisypon Anti-cast! As if Linux didn’t already have enough task scheduling mechanisms, we now have “timers”—a highly configurable task scheduling mechanism implemented by Systemd. Threat actors are already starting to use Systemd timers for persistence. Hal ...
The Windows Search Indexer service does not just provide a fast way to locate and access a misplaced file, this service’s database holds tremendous forensic value for host investigations. With the recent introduction of efficient parsing tools, analysts can gain access to these gems from ...
In this free one-hour Antisyphon Anti-cast, Jay Beale - InGuardians CTO, will teach you how to use the latest container escape, "Leaky Vessels" (CVE-2024-21626), to break out of a Kubernetes pod and attack the cluster. He'll also introduce KubeHound and Peirates, two Kubernetes security tools. ...
In this free one-hour Antisyphon Anti-Cast, Tim Fowler - Black Hills Information Security: Security Analyst, will explore the versatile world of software-defined radio (SDR) and its application in satellite communication. After an introduction to SDR, its capabilities, and advantages over traditional radio systems, the discussion ...
Tune in to 'Radioactive Vulnerabilities - Learn Secure Coding', a free one-hour Antisyphon Anti-Cast that shares the tragic story of the Therac-25 radiation therapy incidents and how those incidents can teach us the significance of security testing before technology deployment. During this interactive Anti-Cast, we ...
Velociraptor has been around for some time now, but still too few practitioners have realized its full potential. Furthermore, new and awesome features added recently nearly double its potential as an incident response (IR) Swiss Army Knife. In this free one-hour Antisyphon Anti-Cast with Eric ...
Imagine, if you will, you’re a pen tester, and you’ve gained access to a Windows application server. Your discovery includes a deployed application allow listing, and a strong defensive solution stack. Your excitement increases as you find an installed Python interpreter. Wouldn’t it be fantastic ...
