423 matches found
DEFCON-KQL-KUNG-FU-22
DEFCON-KQL-KUNG-FU-22 My DEFCON30 Cloud Village KQL Kung Fu Workshop slide deck lives here: DEFCON30-KQL-Kung-Fu.pdf If you'd like to practice your KQL skills, visit this Log Analytics Workspace that's maintained with tons of log data by Microsoft: aka.ms/lademo...
red-kube
Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...
viewstate-security-workshop
Viewstate Security Workshop This repository is for the Testing ASP.NET ViewState with YSoNet YSoSerial.NET workshop. Recommended Reading: Exploiting Deserialisation in ASP.NET via ViewState Recommended Tools For Solving The Labs when lab has been setup: https://github.com/irsdl/crapsecrets...
codeql-workshop-cve-2021-21380
CodeQL workshop for Java: Finding a SQL injection In this workshop we will use syntactical and semantic reasoning to find a SQL injection in the XWiki platform's rating component documented by CVE-2021-21380 Contents CodeQL workshop for Java: Finding a SQL injection Contents Prerequisites and set...
hakuin
Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...
wardriving
Wardriving Here you can find all the data about the Wardriving Workshop from Ekoparty 2017. Faraday Plugins The files starting with import are all modules to be used with the Faraday Plugin. In order to run them, download and copy to you faradayinstallation/bin/. For more info on the Faraday Plug...
maldev-for-dummies
ダミーのためのマルウェア開発 EDRの時代において、レッドチームのオペレーターは既にコンパイルされたペイロードを使い続けることはできません。そのため、マルウェア開発はあらゆるオペレーターにとって重要なスキルになりつつあります。maldevの開始は難しく思えるかもしれませんが、実際には非常に簡単です。このワークショップでは、始めるために必要なすべてを紹介します！ このリポジトリには、Hack in Paris 2022およびX33fcon 2023で開催された／開催予定の「MalDev for...
defcon33_silence_kill_edr
🛡️ DEFCON Workshop: Putting EDRs in Their Place 💀 Killing and Silencing EDR Agents Like an Adversary Setup EDR Killing Custom EDR Evasion 🎯 What You’ll Do Each student will be provisioned their own lab environment to: 🔍 Investigate a live EDR agent: discover its hooks, logs, and reach ⚔️ Compile &...
exploit-workshop
exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...
codeql-workshop
Finding vulnerabilities with CodeQL Original workshop by Sylwia Budzynska Prerequisites • Resources • Workshop Who is this for : Security Engineers, Security Researchers, Developers. What you'll learn : Learn how to use CodeQL for code exploration and for finding security issues. What you'll buil...
android-kernel-exploitation-ashfaq-CVE-2019-2215
android-kernel-exploitation-ashfaq-CVE-2019-2215. Docker image provided by user Robert Dan in the workshop android-kernel-exploitation-ashfaq-CVE-2019-2215...
nmap-nse-scripts
Repository for NSE Nmap Scripting Engine development. You will find my scripts including non-official ones, libraries, resources and other related material from my workshops. TODO -Finishing SMB2 NSE library -Currently working on password mangling functionality Paulino Calderon calderonwebsec.mx...
android-kernel-exploitation
Android 内核漏洞利用 目标 本工作坊的目标是开始学习 Android 平台上的内核漏洞分析 与漏洞利用 。 使用方法 克隆仓库 root@kitploit: git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop Github Pages 网址 https://cloudfuzz.github.io/android-kernel-exploitation/ 工作坊直播 用于构建内核的 Docker root@kitploit: 构建 docker 镜像 docker build -t...
Azure_Workshop
Azure Red Team Attack and Detect Workshop This is a vulnerable-by-design Azure lab containing 2 x attack paths with common misconfigurations. These vulnerabilities are intended to represent those found in live production environments and the attack vectors are intended to be as realistic as...
DEFCON-CICD-pipelines-workshop
CI/CD : The new Eldorado ? Abstract CI/CD pipelines are increasingly becoming part of the standard infrastructure within dev teams, with the rise of new approaches such as Infrastructure as Code, the sensitivity level of such pipelines is escalating quickly. In case of compromise, it is not just...
reverse-engineering-workshop
...
MalwareMorphology
MalwareMorphology This workshop was created for NorthSec 2023 and thankfully the presentation is available on YouTube here...
DEFCON-31-Syscalls-Workshop
Indirect Syscalls: A journey from high to low RedOps | Red Team Village | DEF CON 31 Getting Started All the theory and playbooks for the exercises can be found in the wiki, which together with the prepared POCs is the heart of this project. The POCs for the exercises can be found here on the mai...
rust-reversing-workshop-recon-2024
Reversing Rust Binaries: One step beyond strings - REcon 2024 Workshop This repository contains the supplementary files for the Reversing Rust Binaries: One step beyond strings workshop at REcon 2024, presented on June 28, 2024. During the presentation, we will be building and reversing a very...