SANS Offensive Operations

Offensive GoLang 2.0 | Pen Test HackFest Summit 2021

Demystifying Capture the Flag (CTF) Competitions | Pen Test HackFest 2021

Penetration Testing Experience and How to Get It | Pen Test HackFest Summit 2021

Keynote: Get Offensive with Management | Pen Test HackFest Summit 2021

A Seriously Righteous Hack | Pen Test HackFest Summit 2021

Writing Reports: The Overlooked Pen Testing Skill | Pen Test HackFest Summit 2021

The Hacker’s Guide to Mentorship: Fostering the Diverse Workforce of the Future | HackFest 2021

Building an ICS Firing Range (In Our Kitchen) | Pen Test HackFest Summit 2021

So You Think You Can Secure Your Cloud : Red Team Engagements in GCP | Pen Test HackFest Summit 2021

API Security 101: Tools, Tips and Tricks | Pen Test HackFest Summit 2021

Automating Adaptive Adversaries | Pen Test HackFest Summit 2021

Hacking JWT | Pen Test HackFest Summit 2021

Red + Blue = Purple: Our Journey Building a Dedicated Purple Team at Meta

Format String Vulnerabilities – The Impact Of A Leaky Program

Santas Guide to Breaking into Buildings

A Series of Unfortunate Events: A Tail of Hacking Organizations Through Bug Bounties

From Pentest to Red Team: Overview of The Necessary Skills and Breakdown of Frameworks

SANS Webcast: Web Application Scanning Automation

Proxyjacking: The Latest Cybercriminal Side Hustle

SANS Offensive Operations: New Course Preview | Pen Test HackFest Summit 2021

SANS Webcast: Automating Information Security with Python

Java on the server? What could possibly go wrong?

Ab)using the Microsoft Identity Platform: ExploringAzure AD Token Caching

Keynote: Reframing Hard Cybersecurity Problems for Fun and Profit

Introduction to Writing Nmap NSE Scripts

The Invisible Threat: AI-Powered Vishing Attacks and Defense Strategies

Maldocs: Tips for Red Teamers w/ Didier Stevens - SANS HackFest & Ranges Summit 2020

Keynote: Using CTF Challenges to Level-Up Your Cybersecurity Career w/ Ed Skoudis - HackFest 2020

Micro Emulation Plans: Making Adversary Emulation Accessible

Threat Focused Purple Team Exercises (non Active Directory Edition)

VulnerabilityGPT: Cybersecurity in the Age of LLM and AI

Detecting DCSync and DCShadow Network Traffic

Tactical MiTM for Attack and Defense

Hardware Hacking: Intro to Programming Micro Controllers w/ Mick Douglas - SANS HackFest 2020

SANS Webcast: Running a Better Red Team Through Understanding ICS SCADA Adversary Tactics

Flying Under the Radar: Hiding Web Shells From Web Application Firewall

SANS Webcast: Pen Testing with PowerShell - Local Privilege Escalation Techniques

SANS Webcast: Pen Testing with PowerShell - Data Exfiltration Techniques

Mastering Adversary Emulation with Caldera: A Practical Guide

SEC554: Blockchain And Smart Contract Security - How To Lose $280 Million With A Single Line Of Code

MalDev and Syscalls and BOFs, Oh My!

Hacking Common AD Misconfigurations

SEC642: Killing Snakes For Fun, Flask SSTIs and RCEs In Python

A Compendium of Exploits and Bypasses for eBPF-based Cloud Security

SANS Webcast: HTTP/2 & Websockets are gonna change the Pen Test World. Are You Ready?