Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Hacking Series Part 16](https://medium.com/@alisyakainth/hacking-series-part- ``````...
1 minutes read
[Hacking Series Part 16](https://medium.com/@alisyakainth/hacking-series-part- ``````...
1 minutes read
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Directory Traversal Zafiyeti](https://medium.com/@erensagdicc/directory-trave ``````...
1 minutes read
[Directory Traversal Zafiyeti](https://medium.com/@erensagdicc/directory-trave ``````...
1 minutes read
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Deep Dive into Cover Protocol’s December 28, 2020 Exploit](https://medium.com
1 minutes read
[Deep Dive into Cover Protocol’s December 28, 2020 Exploit](https://medium.com
```...
1 minutes read
Medium
Medium: Read and write stories.
On Medium, anyone can share insightful perspectives, useful knowledge, and life wisdom with the world.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[HackTheBox Writeup — Passage](https://medium.com/@arkanoidctf/hackthebox-writ ``````...
1 minutes read
[HackTheBox Writeup — Passage](https://medium.com/@arkanoidctf/hackthebox-writ ``````...
1 minutes read
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
[Gaara 1 : VulnHub : Write-Up](https://medium.com/@ashanperera442a/gaara-1-vul ``````...
1 minutes read
[Gaara 1 : VulnHub : Write-Up](https://medium.com/@ashanperera442a/gaara-1-vul ``````...
1 minutes read
Media is too big
VIEW IN TELEGRAM
Black Hat (Youtube)
An Unauthenticated Journey to Root: Pwning Your Company's Enterprise Software Servers
Often Fortune 1000 companies consist of a plethora of software, hardware, vendors, and solutions all operating to keep the business running and alive. With all this complexity, there is often a single vendor that's common amongst them all: SAP.
SAP's software relationship with the enterprise is well established, often responsible for processing billions of dollars, but with such a vital role in business, what would the impact be if serious flaws were exploited?
By Pablo Artuso and Yvan Genuer
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#an-unauthenticated-journey-to-root-pwning-your-companys-enterprise-software-servers-19964
An Unauthenticated Journey to Root: Pwning Your Company's Enterprise Software Servers
Often Fortune 1000 companies consist of a plethora of software, hardware, vendors, and solutions all operating to keep the business running and alive. With all this complexity, there is often a single vendor that's common amongst them all: SAP.
SAP's software relationship with the enterprise is well established, often responsible for processing billions of dollars, but with such a vital role in business, what would the impact be if serious flaws were exploited?
By Pablo Artuso and Yvan Genuer
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#an-unauthenticated-journey-to-root-pwning-your-companys-enterprise-software-servers-19964
Hacking Articles Tips Tricks Videos Tutorials
Photo
YouTube
Lateral Movement & Privilege Escalation in GCP; Compromise Organizations without Dropping an Implant
Google Cloud's security model in many ways is quite different from AWS. Spark jobs, Cloud Functions, Jupyter Notebooks, and more default to having administrative capabilities over cloud API's. Instead of defaulting to no capabilities, permissions are granted…
Hacking Articles Tips Tricks Videos Tutorials
Photo
YouTube
Making an Impact from India to the Rest of the World by Building & Nurturing Women Infosec Community
India is one of the most diverse and fastest growing countries in the world and due to the fast growth, women often are left behind. The world average female literacy rate is 79.7%, while in India the average rate is just 65.46, and for women that enter the…
Hacking Articles Tips Tricks Videos Tutorials
Photo
YouTube
Stealthily Access Your Android Phones: Bypass the Bluetooth Authentication
Every Android phone loves Bluetooth, a short-range wireless communication technology. We can find a large number of Bluetooth devices in any public place. Many of their security issues have been exposed before, such as BlueBorne, KNOB, and BadBluetooth. Today…
Hacking Articles Tips Tricks Videos Tutorials
Photo
YouTube
Hacking the Supply Chain – The Ripple20 Vulnerabilities Haunt Tens of Millions of Critical Devices
This is the story of how we found and exploited a series of critical vulnerabilities (later named Ripple20) affecting tens or hundreds of millions of IoT devices across all IoT sector conceivable - industrial controllers, power grids, medical, home, networking…
Media is too big
VIEW IN TELEGRAM
Black Hat (Youtube)
Healthscare – An Insider's Biopsy of Healthcare Application Security
The core of this presentation will focus on vulnerabilities and design issues within healthcare solutions. As we will illustrate through the dissection of numerous clinical focused systems, including radiology reading, EMR downtime, patient entertainment, pharmacy distribution, nurse communication, M&A EMR, clinical documentation and temperature monitoring systems, the prognosis doesn’t look good. Unfortunately, it is our experience that there are few solutions within the hospital enterprise that do not have issues.
By Seth Fogie
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#healthscare---an-insiders-biopsy-of-healthcare-application-security-19643
Healthscare – An Insider's Biopsy of Healthcare Application Security
The core of this presentation will focus on vulnerabilities and design issues within healthcare solutions. As we will illustrate through the dissection of numerous clinical focused systems, including radiology reading, EMR downtime, patient entertainment, pharmacy distribution, nurse communication, M&A EMR, clinical documentation and temperature monitoring systems, the prognosis doesn’t look good. Unfortunately, it is our experience that there are few solutions within the hospital enterprise that do not have issues.
By Seth Fogie
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#healthscare---an-insiders-biopsy-of-healthcare-application-security-19643
Media is too big
VIEW IN TELEGRAM
Black Hat (Youtube)
Engineering Empathy: Adapting Software Engineering Principles and Process to Security
Software engineering has a lot to teach our 'security engineering' teams - this session will be a live retrospective of a professional role reversal - dropping a principal security engineer into a runtime team, and placing a principal software engineer into the platform security assessment team.
By Craig Ingram & Camille Mackinnon
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#engineering-empathy-adapting-software-engineering-principles-and-process-to-security-19659
Engineering Empathy: Adapting Software Engineering Principles and Process to Security
Software engineering has a lot to teach our 'security engineering' teams - this session will be a live retrospective of a professional role reversal - dropping a principal security engineer into a runtime team, and placing a principal software engineer into the platform security assessment team.
By Craig Ingram & Camille Mackinnon
Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefings/schedule/#engineering-empathy-adapting-software-engineering-principles-and-process-to-security-19659