Канал: SANS Offensive Operations

Adversaries Are Doing Stranger Things

Adversaries Are Doing Stranger Things

The Always-On Purple Team: An Automated CI/CD for Detection Engineering

The Always-On Purple Team: An Automated CI/CD for Detection Engineering

Mastering Adversary Emulation with Caldera: A Practical Guide

Mastering Adversary Emulation with Caldera: A Practical Guide

The Second Rule of Hacking: There Are No Rules

The Second Rule of Hacking: There Are No Rules

From Pentest to Red Team: Overview of The Necessary Skills and Breakdown of Frameworks

From Pentest to Red Team: Overview of The Necessary Skills and Breakdown of Frameworks

OT Pen-testing: How Not to Sink an Oil Rig

OT Pen-testing: How Not to Sink an Oil Rig

Fortifying Resilience: An In-Depth Exploration of the Overall Product Security Assessment Poster

Fortifying Resilience: An In-Depth Exploration of the Overall Product Security Assessment Poster

SANS Pen Test 2024: A Sneak Peek Into All That's in Store!

SANS Pen Test 2024: A Sneak Peek Into All That's in Store!

Learn About SEC565: Red Team Operations and Adversary Emulation

Learn About SEC565: Red Team Operations and Adversary Emulation

A Compendium of Exploits and Bypasses for eBPF-based Cloud Security

A Compendium of Exploits and Bypasses for eBPF-based Cloud Security

Proxyjacking: The Latest Cybercriminal Side Hustle

Proxyjacking: The Latest Cybercriminal Side Hustle

A Series of Unfortunate Events: A Tail of Hacking Organizations Through Bug Bounties

A Series of Unfortunate Events: A Tail of Hacking Organizations Through Bug Bounties

The Latest Exploit (BLASTPASS) in the Ongoing NSOZero-Click/Zero-Day Exploitation Campaign

The Latest Exploit (BLASTPASS) in the Ongoing NSOZero-Click/Zero-Day Exploitation Campaign

Just Pocket Change? Examining the Cost of “Nickel and Dime” Exploit Mitigations

Just Pocket Change? Examining the Cost of “Nickel and Dime” Exploit Mitigations

A Hole in the Bucket: The Risk of Public Access toCloud Native Storage

A Hole in the Bucket: The Risk of Public Access toCloud Native Storage

Seek Out New Protocols, and Boldly Hack Undetected

Seek Out New Protocols, and Boldly Hack Undetected

A Practical Approach to Smart Fuzzing:Discovering 8 Zero-Days in a Week

A Practical Approach to Smart Fuzzing:Discovering 8 Zero-Days in a Week

Modern Adversarial Reconnaissance – Long Live the External

Modern Adversarial Reconnaissance – Long Live the External

Enhancing Red Teaming with AI and ML

Enhancing Red Teaming with AI and ML

Keynote | Hacking the Cloud Like an APT

Keynote | Hacking the Cloud Like an APT

Unlocking Secrets: An Exploration of PulseView &Side-Channel Timing Attacks

Unlocking Secrets: An Exploration of PulseView &Side-Channel Timing Attacks

The Invisible Threat: AI-Powered Vishing Attacks and Defense Strategies

The Invisible Threat: AI-Powered Vishing Attacks and Defense Strategies

Ab)using the Microsoft Identity Platform: ExploringAzure AD Token Caching

Ab)using the Microsoft Identity Platform: ExploringAzure AD Token Caching

That Shouldn’t Have Worked

That Shouldn’t Have Worked

Anti-Deception: Catching the Canaries

Anti-Deception: Catching the Canaries

Keynote | Security Research: Not Just for Nation States

Keynote | Security Research: Not Just for Nation States

Combating Supply Chain Attacks with Product Security Testing

Combating Supply Chain Attacks with Product Security Testing

VulnerabilityGPT: Cybersecurity in the Age of LLM and AI

VulnerabilityGPT: Cybersecurity in the Age of LLM and AI

Cloud Scanning For Vulnerability Discovery

Cloud Scanning For Vulnerability Discovery

Sneak Peek - SEC598: Security Automation For Offense Defense And Cloud

Sneak Peek - SEC598: Security Automation For Offense Defense And Cloud

Smart Contract Hacking

Smart Contract Hacking

Hacking Serverless Applications:A Treasure Map for Uncharted Waters

Hacking Serverless Applications:A Treasure Map for Uncharted Waters

MalDev and Syscalls and BOFs, Oh My!

MalDev and Syscalls and BOFs, Oh My!

Lookin’ for Bugs in All the Wrong Places

Lookin’ for Bugs in All the Wrong Places

Santa's Guide to Breaking into Buildings

Santa's Guide to Breaking into Buildings

Kernel Karnage: Patching EDR in Kernel Space

Kernel Karnage: Patching EDR in Kernel Space

Offensive Forensics

Offensive Forensics

What I Wish I Knew Before Pentesting AWS Environments

What I Wish I Knew Before Pentesting AWS Environments

Cyber Resilience: Purple Team Success in Practice

Cyber Resilience: Purple Team Success in Practice

Flying Under the Radar: Hiding Web Shells From Web Application Firewall

Flying Under the Radar: Hiding Web Shells From Web Application Firewall

Attack and Defend: Leveraging AWS Serverless Technology for End-to-End C2

Attack and Defend: Leveraging AWS Serverless Technology for End-to-End C2

Purple Teaming in an Enterprise: Why, Who, When, and How

Purple Teaming in an Enterprise: Why, Who, When, and How

Crafting Adversarial Detections at Scale in Google Cloud Platform

Crafting Adversarial Detections at Scale in Google Cloud Platform

Micro Emulation Plans: Making Adversary Emulation Accessible

Micro Emulation Plans: Making Adversary Emulation Accessible

Cloudy With A Chance of Purple Rain: Leveraging Stratus Red Team to Secure Your Clouds

Cloudy With A Chance of Purple Rain: Leveraging Stratus Red Team to Secure Your Clouds

Tactical MiTM for Attack and Defense

Tactical MiTM for Attack and Defense

Purple Teaming Cloud Identity: Simulation Labs for Red and Blue Teams

Purple Teaming Cloud Identity: Simulation Labs for Red and Blue Teams

Top Network Attacks ... and How to Fix them

Top Network Attacks ... and How to Fix them

Red + Blue = Purple: Our Journey Building a Dedicated Purple Team at Meta

Red + Blue = Purple: Our Journey Building a Dedicated Purple Team at Meta

Developing HIgh-Impact Malware with Minimal Effort

Developing HIgh-Impact Malware with Minimal Effort

Fun with Shellcode (Loaders)

Fun with Shellcode (Loaders)

Keynote: Reframing Hard Cybersecurity Problems for Fun and Profit

Keynote: Reframing Hard Cybersecurity Problems for Fun and Profit

Keynote: Researched Adversaries

Keynote: Researched Adversaries

Master of Puppets: How to Tamper an EDR?

Master of Puppets: How to Tamper an EDR?

Getting Started with Atomic Red Team

Getting Started with Atomic Red Team

In the Trenches: Purple Team Do’s and Don’ts

In the Trenches: Purple Team Do’s and Don’ts

Advanced Purple Teaming

Advanced Purple Teaming

I’ve Got a Golden Twinkle in My Eye

I’ve Got a Golden Twinkle in My Eye

Purple Team PIRs: What Adversary Emulations Need From Cyber Threat Intelligence

Purple Team PIRs: What Adversary Emulations Need From Cyber Threat Intelligence

Maximizing the Value of Attack Detection Tooling with Atomic Purple Teaming

Maximizing the Value of Attack Detection Tooling with Atomic Purple Teaming

Cloud Scanning For Vulnerability Discovery

Cloud Scanning For Vulnerability Discovery

Panel: Web3 Wars - A New Hope

Panel: Web3 Wars - A New Hope

Stoics on Crypto Security Awareness: Control What You Can Control! Understand What You Cannot

Stoics on Crypto Security Awareness: Control What You Can Control! Understand What You Cannot

Detecting Price Manipulation Attacks

Detecting Price Manipulation Attacks

The Great (Cyber Security) Reset

The Great (Cyber Security) Reset

The Uncensorable Stack: Malicious Applications of Blockchain Technology

The Uncensorable Stack: Malicious Applications of Blockchain Technology

Too Good to Be True: Exploring the Ecosystem of Cryptocurrency Giveaway Scams

Too Good to Be True: Exploring the Ecosystem of Cryptocurrency Giveaway Scams

Securing Your Keys to the Castle

Securing Your Keys to the Castle

How to Secure Self Hosted Blockchain Infrastructure

How to Secure Self Hosted Blockchain Infrastructure

Detecting on Chain Attacks

Detecting on Chain Attacks

CBDCs, Stable Coins and the Future of Money

CBDCs, Stable Coins and the Future of Money

Emulating and Preventing SMB Attacks Including Relaying and Responder

Emulating and Preventing SMB Attacks Including Relaying and Responder

Pen Test HackFest 2022 Coming Soon!

Pen Test HackFest 2022 Coming Soon!

Common Persistence Strategies - Emulating, Preventing, and Detecting

Common Persistence Strategies - Emulating, Preventing, and Detecting

A Month of PowerShell – Closing Webcast! (Lessons Learned)

A Month of PowerShell – Closing Webcast! (Lessons Learned)

A Month of PowerShell – Kickoff Webcast!

A Month of PowerShell – Kickoff Webcast!

Novel Trick or Critical Component: How Does Cyber Deception Fit Into Modern Security Architecture?

Novel Trick or Critical Component: How Does Cyber Deception Fit Into Modern Security Architecture?

SEC670: Red Team Ops – Windows Tool Development Preview

SEC670: Red Team Ops – Windows Tool Development Preview

Offensive Security Operations with Attack Surface Management & Always-On Pen Testing

Offensive Security Operations with Attack Surface Management & Always-On Pen Testing

Intro to Password Guessing and Cracking (Directly from SEC560!)

Intro to Password Guessing and Cracking (Directly from SEC560!)

Threat-Informed Detection Engineering

Threat-Informed Detection Engineering

Getting The Most Out Of The SANS Pivot Cheat Sheet

Getting The Most Out Of The SANS Pivot Cheat Sheet

Introducing SEC565: Red Team Operations And Adversary Emulation

Introducing SEC565: Red Team Operations And Adversary Emulation

Operationalized Purple Teaming

Operationalized Purple Teaming

Running Your First Purple Team Exercise - Understand The Cyber Kill Chain, Emulation, & Response

Running Your First Purple Team Exercise - Understand The Cyber Kill Chain, Emulation, & Response

Why Log4j Does Not Scare Me

Why Log4j Does Not Scare Me

Automating Adaptive Adversaries | Pen Test HackFest Summit 2021

Automating Adaptive Adversaries | Pen Test HackFest Summit 2021

The Hacker’s Guide to Mentorship: Fostering the Diverse Workforce of the Future | HackFest 2021

The Hacker’s Guide to Mentorship: Fostering the Diverse Workforce of the Future | HackFest 2021

SANS Offensive Operations: New Course Preview | Pen Test HackFest Summit 2021

SANS Offensive Operations: New Course Preview | Pen Test HackFest Summit 2021

ATT&CKing Offensive Operations | Pen Test HackFest Summit 2021

ATT&CKing Offensive Operations | Pen Test HackFest Summit 2021

A Seriously Righteous Hack | Pen Test HackFest Summit 2021

A Seriously Righteous Hack | Pen Test HackFest Summit 2021

Penetration Testing Experience and How to Get It | Pen Test HackFest Summit 2021

Penetration Testing Experience and How to Get It | Pen Test HackFest Summit 2021

Offensive GoLang 2.0 | Pen Test HackFest Summit 2021

Offensive GoLang 2.0 | Pen Test HackFest Summit 2021

API Security 101: Tools, Tips and Tricks | Pen Test HackFest Summit 2021

API Security 101: Tools, Tips and Tricks | Pen Test HackFest Summit 2021

So You Think You Can Secure Your Cloud : Red Team Engagements in GCP | Pen Test HackFest Summit 2021

So You Think You Can Secure Your Cloud : Red Team Engagements in GCP | Pen Test HackFest Summit 2021

Writing Reports: The Overlooked Pen Testing Skill | Pen Test HackFest Summit 2021

Writing Reports: The Overlooked Pen Testing Skill | Pen Test HackFest Summit 2021

Building an ICS Firing Range (In Our Kitchen) | Pen Test HackFest Summit 2021

Building an ICS Firing Range (In Our Kitchen) | Pen Test HackFest Summit 2021

Keynote: Get Offensive with Management | Pen Test HackFest Summit 2021

Keynote: Get Offensive with Management | Pen Test HackFest Summit 2021

Demystifying Capture the Flag (CTF) Competitions | Pen Test HackFest 2021

Demystifying Capture the Flag (CTF) Competitions | Pen Test HackFest 2021

Hacking JWT | Pen Test HackFest Summit 2021

Hacking JWT | Pen Test HackFest Summit 2021

Detecting DCSync and DCShadow Network Traffic

Detecting DCSync and DCShadow Network Traffic

SANS Hackfest 2021 (Nov 15-16)

SANS Hackfest 2021 (Nov 15-16)

Hackers Are People Too: Using Cyber Deception To Combat The Human Element Of Cyber Attacks

Hackers Are People Too: Using Cyber Deception To Combat The Human Element Of Cyber Attacks

SANS Workshop - Reflection in C#

SANS Workshop - Reflection in C#

Pen Testing Smart Contracts to Stop The Next Poly Network Hack

Pen Testing Smart Contracts to Stop The Next Poly Network Hack

Overview of SEC661: ARM Exploit Development and an Introduction to Router Emulation

Overview of SEC661: ARM Exploit Development and an Introduction to Router Emulation

Pen Testers are Teachers

Pen Testers are Teachers

Purple chaos - Dos and Don’ts of the game

Purple chaos - Dos and Don’ts of the game

Purple Team Feedback Loop

Purple Team Feedback Loop

Which Came First: The Phish or the Opportunity to Defend Against It

Which Came First: The Phish or the Opportunity to Defend Against It

Gone in 66 Techniques – How MITRE ATT&CK® Evaluations Round #3 United Us as a (Purple) Team

Gone in 66 Techniques – How MITRE ATT&CK® Evaluations Round #3 United Us as a (Purple) Team

Order Through Chaos: Data-Driven Hypothesis Creation Using Security Chaos Engineering

Order Through Chaos: Data-Driven Hypothesis Creation Using Security Chaos Engineering

Red Vs Blue - Getting Blue Team Value from Red Team Testing

Red Vs Blue - Getting Blue Team Value from Red Team Testing

Purple Maturity Model

Purple Maturity Model

Don't Fear the Zero: A Test-driven Approach to Analytic Development | PurpleTeam Summit 2021

Don't Fear the Zero: A Test-driven Approach to Analytic Development | PurpleTeam Summit 2021

Designing Playbooks with Purple Team Approach

Designing Playbooks with Purple Team Approach

Purple Team War Stories

Purple Team War Stories

The Active Directory Purple Team Playbook

The Active Directory Purple Team Playbook

Red Team Engagements: Training Your Blue Team to Hunt Adversaries

Red Team Engagements: Training Your Blue Team to Hunt Adversaries

Purple Vitamins To Grow Your Skills

Purple Vitamins To Grow Your Skills

Think Red, Act Blue - Evaluating the Security Cost of New Technology

Think Red, Act Blue - Evaluating the Security Cost of New Technology

Supply Chain Purple: Simulating Supply Chain Attacks With DLL Hijacking

Supply Chain Purple: Simulating Supply Chain Attacks With DLL Hijacking

Look at me, I'm the Adversary now: Intro to Adversary Emulation & Its Place in Security Operations

Look at me, I'm the Adversary now: Intro to Adversary Emulation & Its Place in Security Operations

Understanding the Effectiveness of Exploit Mitigations for Purple Teams

Understanding the Effectiveness of Exploit Mitigations for Purple Teams

Threat Focused Purple Team Exercises (non Active Directory Edition)

Threat Focused Purple Team Exercises (non Active Directory Edition)

Purple Wars: Episode II - Attack of the Emulators

Purple Wars: Episode II - Attack of the Emulators

Maniacal Keyboards

Maniacal Keyboards

Advanced Web Application Penetration Testing JWT Security Issues

Advanced Web Application Penetration Testing JWT Security Issues

Burp Suite Cheat Sheet and Tips & Tricks

Burp Suite Cheat Sheet and Tips & Tricks

Think Red, Act Blue - Hacking Proprietary Protocols

Think Red, Act Blue - Hacking Proprietary Protocols

Format String Vulnerabilities – The Impact Of A Leaky Program

Format String Vulnerabilities – The Impact Of A Leaky Program

So You Want To Be A Red Teamer?

So You Want To Be A Red Teamer?

Hunting Logic Attacks - A Peak At SEC552: Bug Bounties & Responsible Disclosure, vol 2

Hunting Logic Attacks - A Peak At SEC552: Bug Bounties & Responsible Disclosure, vol 2

Course Showcase - SEC460: Enterprise and Cloud | Threat and Vulnerability Assessment

Course Showcase - SEC460: Enterprise and Cloud | Threat and Vulnerability Assessment

Cloud Penetration Testing Workshop | SANS Pen Test HackFest Summit 2020

Cloud Penetration Testing Workshop | SANS Pen Test HackFest Summit 2020

Offensive Security Tools: A Year in Review with the C2 Matrix | SANS Pen Test HackFest Summit 2020

Offensive Security Tools: A Year in Review with the C2 Matrix | SANS Pen Test HackFest Summit 2020

2020 HackFest Scavenger Hunt with Ed Skoudis | SANS Pen Test HackFest Summit 2020

2020 HackFest Scavenger Hunt with Ed Skoudis | SANS Pen Test HackFest Summit 2020

Hardware Hacking: Intro to Programming Micro Controllers | SANS Pen Test HackFest Summit 2020

Hardware Hacking: Intro to Programming Micro Controllers | SANS Pen Test HackFest Summit 2020

Hack Your Kids: The Next Generation of Cybersecurity Practitioners | Pen Test HackFest Summit 2020

Hack Your Kids: The Next Generation of Cybersecurity Practitioners | Pen Test HackFest Summit 2020

Stack Canaries – Gingerly Sidestepping The Cage

Stack Canaries – Gingerly Sidestepping The Cage

Introducing SANS Offensive Operations | Stephen Sims | SANS Institute

Introducing SANS Offensive Operations | Stephen Sims | SANS Institute

SEC554: Blockchain And Smart Contract Security - How To Lose $280 Million With A Single Line Of Code

SEC554: Blockchain And Smart Contract Security - How To Lose $280 Million With A Single Line Of Code

Analyzing The OWASP API Security Top 10 For Pen Testers

Analyzing The OWASP API Security Top 10 For Pen Testers

Hunting Logic Attacks - A Peak At SEC552: Bug Bounties & Responsible Disclosure

Hunting Logic Attacks - A Peak At SEC552: Bug Bounties & Responsible Disclosure

Panel - Practical Cyber Range Tips from Experienced Builders and Users - SANS HackFest Summit 2020

Panel - Practical Cyber Range Tips from Experienced Builders and Users - SANS HackFest Summit 2020

Cyber Ranges Panel - Lessons Learned from Kinetic Ranges - SANS HackFest & Ranges Summit 2020

Cyber Ranges Panel - Lessons Learned from Kinetic Ranges - SANS HackFest & Ranges Summit 2020

Panel - Maximizing the Value of Training in Cyber Ranges - SANS HackFest Summit & Ranges 2020

Panel - Maximizing the Value of Training in Cyber Ranges - SANS HackFest Summit & Ranges 2020

Panel - Best Practices for a Persistent Cyber Training Environment PCTE - HackFest Summit 2020

Panel - Best Practices for a Persistent Cyber Training Environment PCTE - HackFest Summit 2020

Making the Most of Cyber Ranges w/ James Lyne - SANS HackFest & Ranges Summit 2020

Making the Most of Cyber Ranges w/ James Lyne - SANS HackFest & Ranges Summit 2020

Building Compelling Cyber Challenges and Range Scenarios - SANS HackFest & Ranges Summit 2020

Building Compelling Cyber Challenges and Range Scenarios - SANS HackFest & Ranges Summit 2020

Keynote: Using CTF Challenges to Level-Up Your Cybersecurity Career w/ Ed Skoudis - HackFest 2020

Keynote: Using CTF Challenges to Level-Up Your Cybersecurity Career w/ Ed Skoudis - HackFest 2020

Identifying Novel Malware at Scale w/ Pedram Amini - SANS HackFest & Ranges Summit 2020

Identifying Novel Malware at Scale w/ Pedram Amini - SANS HackFest & Ranges Summit 2020

Hardware Hacking: Intro to Programming Micro Controllers w/ Mick Douglas - SANS HackFest 2020

Hardware Hacking: Intro to Programming Micro Controllers w/ Mick Douglas - SANS HackFest 2020

Open Source Election Security – End-to-End Verifiable Voting with Microsoft ElectionGuard - HackFest

Open Source Election Security – End-to-End Verifiable Voting with Microsoft ElectionGuard - HackFest

Getting the Most of Out of Free CtFs w/ Derek Rook - SANS HackFest & Ranges Summit 2020

Getting the Most of Out of Free CtFs w/ Derek Rook - SANS HackFest & Ranges Summit 2020

Where the *$&% is my Identity? w/ Chris Edmundson - SANS HackFest & Ranges Summit 2020

Where the *$&% is my Identity? w/ Chris Edmundson - SANS HackFest & Ranges Summit 2020

Quickstart Guide to MITRE ATT&CK - Do’s and Don’ts w/ Adam Mashincho - HackFest Summit 2020

Quickstart Guide to MITRE ATT&CK - Do’s and Don’ts w/ Adam Mashincho - HackFest Summit 2020

Anatomy of a Gopher: Binary Analysis of Go Binaries w/ Alex Useche - SANS HackFest Summit 2020

Anatomy of a Gopher: Binary Analysis of Go Binaries w/ Alex Useche - SANS HackFest Summit 2020

Automated Detection of Software Vulnerabilities Using Deep-Learning w/ Nidhi Rastogi - SANS HackFest

Automated Detection of Software Vulnerabilities Using Deep-Learning w/ Nidhi Rastogi - SANS HackFest

Supercharge Your Red Team with RedELK w/ Marc Smeets - SANS HackFest & Ranges Summit 2020

Supercharge Your Red Team with RedELK w/ Marc Smeets - SANS HackFest & Ranges Summit 2020

Functional Cloud C2 w/ Chris Truncer - SANS HackFest & Ranges Summit 2020

Functional Cloud C2 w/ Chris Truncer - SANS HackFest & Ranges Summit 2020

Windows 10 Kernel Mitigations and Exploitation w/ Jaime Geiger & Stephen Sims - SANS HackFest Summit

Windows 10 Kernel Mitigations and Exploitation w/ Jaime Geiger & Stephen Sims - SANS HackFest Summit

Maldocs: Tips for Red Teamers w/ Didier Stevens - SANS HackFest & Ranges Summit 2020

Maldocs: Tips for Red Teamers w/ Didier Stevens - SANS HackFest & Ranges Summit 2020

How You Can Use your Offensive Skills to Help the Air Force w/ Lillian Warner - SANS HackFest Summit

How You Can Use your Offensive Skills to Help the Air Force w/ Lillian Warner - SANS HackFest Summit

Emulating the Adversary in Post-Exploitation w/ Jake Williams - SANS HackFest & Ranges Summit 2020

Emulating the Adversary in Post-Exploitation w/ Jake Williams - SANS HackFest & Ranges Summit 2020

IDA Pro Challenge Walk Through & What's New In SEC760 'Advanced Exploit Dev'

IDA Pro Challenge Walk Through & What's New In SEC760 'Advanced Exploit Dev'

Overt Operations | When the Red Team gets in your Face!

Overt Operations | When the Red Team gets in your Face!

Introduction to Writing Nmap NSE Scripts

Introduction to Writing Nmap NSE Scripts

Develop Technical Recall Skills: Spaced Repetition with Anki

Develop Technical Recall Skills: Spaced Repetition with Anki

Mobile Application Dynamic Analysis

Mobile Application Dynamic Analysis

Post Modern Web Attacks: Cloud Edition

Post Modern Web Attacks: Cloud Edition

Dirty Defense, Done Dirt Cheap: Make Your Life Easier By Making Mine Harder

Dirty Defense, Done Dirt Cheap: Make Your Life Easier By Making Mine Harder

SANS Security Awareness: Creating a Cyber Secure Home

SANS Security Awareness: Creating a Cyber Secure Home

SANS Security Awareness: Working Remotely

SANS Security Awareness: Working Remotely

SANS Security Awareness: Email and Phishing

SANS Security Awareness: Email and Phishing

SANS Security Awareness: Social Engineering

SANS Security Awareness: Social Engineering

Deployment Kit for Securing Your Workforce at Home

Deployment Kit for Securing Your Workforce at Home

Adversary Emulation and the C2 Matrix

Adversary Emulation and the C2 Matrix

Modern Web Application Penetration Testing Part 2, Hash Length Extension Attacks

Modern Web Application Penetration Testing Part 2, Hash Length Extension Attacks

SEC642: Killing Snakes For Fun, Flask SSTIs and RCEs In Python

SEC642: Killing Snakes For Fun, Flask SSTIs and RCEs In Python

Why It’s Easy Being A Hacker

Why It’s Easy Being A Hacker

Don’t Patch - Transformative Security Programs Go Beyond The Vulnerability

Don’t Patch - Transformative Security Programs Go Beyond The Vulnerability

Hacking Common AD Misconfigurations

Hacking Common AD Misconfigurations

SEC588 Cloud Penetration Testing: What is Cloud Pen Testing and why is it different?

SEC588 Cloud Penetration Testing: What is Cloud Pen Testing and why is it different?

What’s New In SEC575 Mobile Device Security And Ethical Hacking?

What’s New In SEC575 Mobile Device Security And Ethical Hacking?

Modern Web Application Penetration Testing Part 1, XSS And XSRF Together

Modern Web Application Penetration Testing Part 1, XSS And XSRF Together

SANS Webcast: Dominating The Active Directory

SANS Webcast: Dominating The Active Directory

SANS Pen Test HackFest Summit & Training 2019: Sneak Peek

SANS Pen Test HackFest Summit & Training 2019: Sneak Peek

SANS Webcast: Kerberos & Attacks 101

SANS Webcast: Kerberos & Attacks 101

SANS Webcast: Introducing the NEW SANS Pen Test Poster – Pivots & Payloads Board Game

SANS Webcast: Introducing the NEW SANS Pen Test Poster – Pivots & Payloads Board Game

SANS Webcast: Tips and Tricks for Customers and Pen Testers on How to Get Higher Value Pen Tests

SANS Webcast: Tips and Tricks for Customers and Pen Testers on How to Get Higher Value Pen Tests

SANS Webcast: A Practical Introduction into How to Exploit Blind Vulnerabilities

SANS Webcast: A Practical Introduction into How to Exploit Blind Vulnerabilities

SANS Webcast: Passwords and Authentication - Get Up to Speed on Attacks and Defenses

SANS Webcast: Passwords and Authentication - Get Up to Speed on Attacks and Defenses

SANS Webcasts: How Hackers Run Circles Around Our Defenses (Updated)

SANS Webcasts: How Hackers Run Circles Around Our Defenses (Updated)

SANS Webcast: Web Hacking with Burp Suite

SANS Webcast: Web Hacking with Burp Suite

SANS Webcast: Web Application Scanning Automation

SANS Webcast: Web Application Scanning Automation

SANS Webcast: Python Decorators Demystified

SANS Webcast: Python Decorators Demystified

SANS Webcast: Hacker Techniques - Covert Command and Control

SANS Webcast: Hacker Techniques - Covert Command and Control

SANS Webcast: Password Cracking - Beyond the Basics

SANS Webcast: Password Cracking - Beyond the Basics

SANS Webcast: Pen Testing with PowerShell - Local Privilege Escalation Techniques

SANS Webcast: Pen Testing with PowerShell - Local Privilege Escalation Techniques