Azure_Workshop

Azure Red Team Attack and Detect Workshop This is a vulnerable-by-design Azure lab containing 2 x attack paths with common misconfigurations. These vulnerabilities are intended to represent those found in live production environments and the attack vectors are intended to be as realistic as...

crapsecrets

Forked originally from badsecrets 0.7.0 Synced occasionally until March 2025! Outdated with some modules and test cases are not up2date! Good for ASP.NET compromised Machine Key testing! This is CrapBadSecrets mkdir -p /ctools/ cd /ctools/ git clone https://github.com/irsdl/crapsecrets/ cd...

MalwareMorphology

MalwareMorphology This workshop was created for NorthSec 2023 and thankfully the presentation is available on YouTube here...

DEFCON-KQL-KUNG-FU-22

DEFCON-KQL-KUNG-FU-22 My DEFCON30 Cloud Village KQL Kung Fu Workshop slide deck lives here: DEFCON30-KQL-Kung-Fu.pdf If you'd like to practice your KQL skills, visit this Log Analytics Workspace that's maintained with tons of log data by Microsoft: aka.ms/lademo...

reverse-engineering-workshop

...

nmap-nse-scripts

Repository for NSE Nmap Scripting Engine development. You will find my scripts including non-official ones, libraries, resources and other related material from my workshops. TODO -Finishing SMB2 NSE library -Currently working on password mangling functionality Paulino Calderon calderonwebsec.mx...

exploit-workshop

exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...

codeql-workshop

Finding vulnerabilities with CodeQL Original workshop by Sylwia Budzynska Prerequisites • Resources • Workshop Who is this for : Security Engineers, Security Researchers, Developers. What you'll learn : Learn how to use CodeQL for code exploration and for finding security issues. What you'll buil...

wardriving

Wardriving Here you can find all the data about the Wardriving Workshop from Ekoparty 2017. Faraday Plugins The files starting with import are all modules to be used with the Faraday Plugin. In order to run them, download and copy to you faradayinstallation/bin/. For more info on the Faraday Plug...

DEFCON-CICD-pipelines-workshop

CI/CD : The new Eldorado ? Abstract CI/CD pipelines are increasingly becoming part of the standard infrastructure within dev teams, with the rise of new approaches such as Infrastructure as Code, the sensitivity level of such pipelines is escalating quickly. In case of compromise, it is not just...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

android-kernel-exploitation-ashfaq-CVE-2019-2215

android-kernel-exploitation-ashfaq-CVE-2019-2215. Docker image provided by user Robert Dan in the workshop android-kernel-exploitation-ashfaq-CVE-2019-2215...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

rust-reversing-workshop-recon-2024

Reversing Rust Binaries: One step beyond strings - REcon 2024 Workshop This repository contains the supplementary files for the Reversing Rust Binaries: One step beyond strings workshop at REcon 2024, presented on June 28, 2024. During the presentation, we will be building and reversing a very...

defcon33_silence_kill_edr

🛡️ DEFCON Workshop: Putting EDRs in Their Place 💀 Killing and Silencing EDR Agents Like an Adversary Setup EDR Killing Custom EDR Evasion 🎯 What You’ll Do Each student will be provisioned their own lab environment to: 🔍 Investigate a live EDR agent: discover its hooks, logs, and reach ⚔️ Compile &...

HSC24RedTeamInfra

HSC24RedTeamInfra Slides and Codes used for the workshop Red Team Infrastructure Automation...

codeql-workshop-cve-2021-21380

CodeQL workshop for Java: Finding a SQL injection In this workshop we will use syntactical and semantic reasoning to find a SQL injection in the XWiki platform's rating component documented by CVE-2021-21380 Contents CodeQL workshop for Java: Finding a SQL injection Contents Prerequisites and set...

DEFCON-31-Syscalls-Workshop

Indirect Syscalls: A journey from high to low RedOps | Red Team Village | DEF CON 31 Getting Started All the theory and playbooks for the exercises can be found in the wiki, which together with the prepared POCs is the heart of this project. The POCs for the exercises can be found here on the mai...

fuzzing

libfuzzer-workshop Materials of "Modern fuzzing of C/C++ Projects" workshop. The first version of the workshop had been presented at ZeroNights'16 security conference. Disclaimer This workshop was originally developed in 2016. As of today 2021 and beyond, the practical side of the workshop might ...

recon_2024_windbg_workshop

REcon 2024 - Tips & Tricks for better debugging with WinDbg This repository contains the materials created for the workshop "Tips & Tricks for better debugging with WinDbg", at REcon 2024. Setup The workshop materials aims to provide useful features for WinDbg, when debugging in kernel-mode, but...