Канал: Z. Cliffe Schreuders

Cross-site Request Forgery (CSRF) Attack Demo

Cross-site Request Forgery (CSRF) Attack Demo

Cross-site Request Forgery (CSRF) Examples

Cross-site Request Forgery (CSRF) Examples

Cross-site Request Forgery (CSRF) Prevention and Defence

Cross-site Request Forgery (CSRF) Prevention and Defence

Ambient Authority

Ambient Authority

The Confused Deputy Problem

The Confused Deputy Problem

Cross-site Request Forgery (CSRF)

Cross-site Request Forgery (CSRF)

Injection Attacks: Prevention

Injection Attacks: Prevention

Injection Attacks: SQL Injection (SQLi)

Injection Attacks: SQL Injection (SQLi)

Injection Attacks: OS Command Injection

Injection Attacks: OS Command Injection

Injection Attacks

Injection Attacks

Cross-Site Scripting (XSS): Demo

Cross-Site Scripting (XSS): Demo

Cross-Site Scripting (XSS): Part 2 Prevention

Cross-Site Scripting (XSS): Part 2 Prevention

Cross-Site Scripting (XSS): Part 1 Types of XSS

Cross-Site Scripting (XSS): Part 1 Types of XSS

Cookies, Sessions, and Security Part 3: Defences

Cookies, Sessions, and Security Part 3: Defences

Cookies, Sessions, and Security Part 2: Sessions and Attacks on Session Management

Cookies, Sessions, and Security Part 2: Sessions and Attacks on Session Management

Cookies, Sessions, and Security Part 1: Cookies

Cookies, Sessions, and Security Part 1: Cookies

Introduction to Web Security

Introduction to Web Security

Open source development and security practices

Open source development and security practices

Secure Development Lifecycles

Secure Development Lifecycles

Secure Design Principles

Secure Design Principles

Threat modeling using STRIDE and Attack Trees

Threat modeling using STRIDE and Attack Trees

STRIDE Threat Modeling using Microsoft Threat Modeling Tool

STRIDE Threat Modeling using Microsoft Threat Modeling Tool

Rule-based Sandboxing and Mandatory Access Controls

Rule-based Sandboxing and Mandatory Access Controls

Writing Exploits (Buffer Overflows Part 2)

Writing Exploits (Buffer Overflows Part 2)

Overflows and Stack Smashing Buffer Overflows

Overflows and Stack Smashing Buffer Overflows

Memory Management Vulnerabilities

Memory Management Vulnerabilities

Sandboxing and Virtualisation

Sandboxing and Virtualisation

Fuzzing Part 2

Fuzzing Part 2

Fuzzing Part 1

Fuzzing Part 1

Studying Cyber Security at Leeds Beckett University: including a look at Hacktivity and Hackerbot

Studying Cyber Security at Leeds Beckett University: including a look at Hacktivity and Hackerbot

Linux Extended ACLs

Linux Extended ACLs

ACLs and Capabilities

ACLs and Capabilities

Race Conditions and Time of Check to Time of Use TOCTTOU Vulnerabilities

Race Conditions and Time of Check to Time of Use TOCTTOU Vulnerabilities

Structured Output Generation Vulnerabilities

Structured Output Generation Vulnerabilities

Special File Permissions SetUID

Special File Permissions SetUID

Access Control Models

Access Control Models

Unix File Permissions

Unix File Permissions

Access Controls: Concepts

Access Controls: Concepts

Active Directory

Active Directory

Kerberos overview

Kerberos overview

Lightweight Directory Access Protocol (LDAP)

Lightweight Directory Access Protocol (LDAP)

Network-based Authentication (SSO, AD, LDAP, Kerberos)

Network-based Authentication (SSO, AD, LDAP, Kerberos)

Authentication Tokens and One-Time Passwords

Authentication Tokens and One-Time Passwords

Biometrics

Biometrics

Authentication

Authentication

User accounts and Linux

User accounts and Linux

Password cracking with Johnny

Password cracking with Johnny

Passwords Part 2 Attacks and Countermeasures

Passwords Part 2 Attacks and Countermeasures

Log Management

Log Management

Dead System Analysis

Dead System Analysis

Packers and UPX Short Demo

Packers and UPX Short Demo

DLL injection for Linux: LD_PRELOAD Demo

DLL injection for Linux: LD_PRELOAD Demo

Malware Behaviour

Malware Behaviour

Investigating a running process

Investigating a running process

Live System Analysis: Tools Demo

Live System Analysis: Tools Demo

Live System Analysis: Concepts

Live System Analysis: Concepts

Regexp (unstructured demo)

Regexp (unstructured demo)

Snort IDS

Snort IDS

IDS accuracy

IDS accuracy

IDS IPS

IDS IPS

Redundancy and RAID

Redundancy and RAID

The Cloud

The Cloud

SRE with Ghidra: Analysis and Renaming Variables and Editing Function Signatures

SRE with Ghidra: Analysis and Renaming Variables and Editing Function Signatures

SRE with Ghidra: Overview and Interface

SRE with Ghidra: Overview and Interface

Backup Levels: Differential and Incremental Backups Using Rsync

Backup Levels: Differential and Incremental Backups Using Rsync

Backup Planning

Backup Planning

Contingency Planning

Contingency Planning

The CIA Triad

The CIA Triad

Protecting Integrity

Protecting Integrity

Monitoring Integrity

Monitoring Integrity

Incident Response

Incident Response

Reverse Engineering and Malware Analysis: Part 2 Dynamic Analysis

Reverse Engineering and Malware Analysis: Part 2 Dynamic Analysis

Reverse Engineering and Malware Analysis: Part 1 Static Analysis

Reverse Engineering and Malware Analysis: Part 1 Static Analysis

Stopping Malware

Stopping Malware

Malware Types

Malware Types

The Problem of Malware

The Problem of Malware

Z. Cliffe Schreuders Live Stream

Z. Cliffe Schreuders Live Stream

Cross-site Request Forgery (CSRF) and Confused Deputies

Cross-site Request Forgery (CSRF) and Confused Deputies

Cross-site Scripting (XSS)

Cross-site Scripting (XSS)

Sessions and Cookies

Sessions and Cookies

Bug Bounties, Bug Hunting and Vulnerability Disclosure

Bug Bounties, Bug Hunting and Vulnerability Disclosure

Injection Attacks: Command Injection and SQL Injection

Injection Attacks: Command Injection and SQL Injection

Introducing Web Security

Introducing Web Security

Time, Workflow, and Getting Things Done

Time, Workflow, and Getting Things Done

Bug Hunting and Exploit Development 2: Finding Flaws Using Fuzzing 1

Bug Hunting and Exploit Development 2: Finding Flaws Using Fuzzing 1

Bug Hunting and Exploit Development 3: Finding Flaws Using Fuzzing 2

Bug Hunting and Exploit Development 3: Finding Flaws Using Fuzzing 2

Bug Hunting and Exploit Development 4: Writing Metasploit Framework MSF Exploit Modules

Bug Hunting and Exploit Development 4: Writing Metasploit Framework MSF Exploit Modules

Bug Hunting and Exploit Development 1: Finding Flaws Using Static Analysis

Bug Hunting and Exploit Development 1: Finding Flaws Using Static Analysis

Understanding Vulnerabilities 2: Categories of Flaws: Computer Security Lectures 2014/15 S2

Understanding Vulnerabilities 2: Categories of Flaws: Computer Security Lectures 2014/15 S2

Access Controls Part 2: Computer Security Lectures 2014/15 S2

Access Controls Part 2: Computer Security Lectures 2014/15 S2

Lockpicking part 1: Computer Security Lectures 2014/15 S2

Lockpicking part 1: Computer Security Lectures 2014/15 S2

Isolation Sandboxes and Application-oriented Access Controls: Computer Security Lectures 2014/15 S2

Isolation Sandboxes and Application-oriented Access Controls: Computer Security Lectures 2014/15 S2

Software Vulnerabilities: Computer Security Lectures 2014/15 S2

Software Vulnerabilities: Computer Security Lectures 2014/15 S2

Introduction to Security Mechanisms: Computer Security Lectures 2014/15 S2

Introduction to Security Mechanisms: Computer Security Lectures 2014/15 S2

Access Controls Part 1: Computer Security Lectures 2014/15 S2

Access Controls Part 1: Computer Security Lectures 2014/15 S2

Security Concepts: Computer Security Lectures 2014/15 S2

Security Concepts: Computer Security Lectures 2014/15 S2

Post-exploitation: Computer Security Lectures 2014/15 S2

Post-exploitation: Computer Security Lectures 2014/15 S2

Privacy: Computer Security Lectures 2014/15 S2

Privacy: Computer Security Lectures 2014/15 S2

Information Gathering: Computer Security Lectures 2014/15 S2

Information Gathering: Computer Security Lectures 2014/15 S2

Understanding Vulnerabilities 1: C, ASM, and Overflows: Computer Security Lectures 2014/15 S2

Understanding Vulnerabilities 1: C, ASM, and Overflows: Computer Security Lectures 2014/15 S2

Personal Privacy and Security: Computer Security Lectures 2014/15 S2

Personal Privacy and Security: Computer Security Lectures 2014/15 S2

Lockpicking part 2: Computer Security Lectures 2014/15 S2

Lockpicking part 2: Computer Security Lectures 2014/15 S2

Introduction to Ethical Hacking: Computer Security Lectures 2014/15 S2

Introduction to Ethical Hacking: Computer Security Lectures 2014/15 S2

From Scanning to Exploitation: Computer Security Lectures 2014/15 S2

From Scanning to Exploitation: Computer Security Lectures 2014/15 S2

Rule-based Sandboxes and Application-oriented Access Controls: Computer Security Lectures 2014/15 S2

Rule-based Sandboxes and Application-oriented Access Controls: Computer Security Lectures 2014/15 S2

Ethics: Computer Security Lectures 2014/15 S2

Ethics: Computer Security Lectures 2014/15 S2

Security News 29/03/2015: Barbie, Rowhammer, FREAK, Android encryption, Panda anti-malware

Security News 29/03/2015: Barbie, Rowhammer, FREAK, Android encryption, Panda anti-malware

Internet Banking Man-In-The-Browser (MITB) Attack

Internet Banking Man-In-The-Browser (MITB) Attack

Security News 18/02/2015, The Great Bank Heist, NSA advanced malware, Netgear, WhatsApp, ...

Security News 18/02/2015, The Great Bank Heist, NSA advanced malware, Netgear, WhatsApp, ...

Security News 12/02/2015, Sony Pictures, Windows RCE, Anthem hacked

Security News 12/02/2015, Sony Pictures, Windows RCE, Anthem hacked

Malware Analysis - Dynamic Analysis: Computer Security Lectures 2014/15 S1

Malware Analysis - Dynamic Analysis: Computer Security Lectures 2014/15 S1

Intrusion Detection and Prevention Systems (IDS/IPS): Computer Security Lectures 2014/15 S1

Intrusion Detection and Prevention Systems (IDS/IPS): Computer Security Lectures 2014/15 S1

Information Security Management: Computer Security Lectures 2014/15 S1

Information Security Management: Computer Security Lectures 2014/15 S1

Integrity Management: Computer Security Lectures 2014/15 S1

Integrity Management: Computer Security Lectures 2014/15 S1

Contingency Planning: Computer Security Lectures 2014/15 S1

Contingency Planning: Computer Security Lectures 2014/15 S1

Risk Management: Computer Security Lectures 2014/15 S1

Risk Management: Computer Security Lectures 2014/15 S1

Dead System Analysis: Computer Security Lectures 2014/15 S1

Dead System Analysis: Computer Security Lectures 2014/15 S1

Live System Analysis - part 2: Computer Security Lectures 2014/15 S1

Live System Analysis - part 2: Computer Security Lectures 2014/15 S1

Live System Analysis - part 1: Computer Security Lectures 2014/15 S1

Live System Analysis - part 1: Computer Security Lectures 2014/15 S1

Backups, Redundancy, and the Cloud: Computer Security Lectures 2014/15 S1

Backups, Redundancy, and the Cloud: Computer Security Lectures 2014/15 S1

Malware Analysis - Static Analysis: Computer Security Lectures 2014/15 S1

Malware Analysis - Static Analysis: Computer Security Lectures 2014/15 S1

Incident Response: Computer Security Lectures 2014/15 S1

Incident Response: Computer Security Lectures 2014/15 S1

Unix, Free and Open Source Software, and Linux Security: Computer Security Lectures 2014/15 S1

Unix, Free and Open Source Software, and Linux Security: Computer Security Lectures 2014/15 S1

Malware: Computer Security Lectures 2014/15 S1

Malware: Computer Security Lectures 2014/15 S1

Software Vulnerabilities: Computer Security Lectures 2014/15 S1

Software Vulnerabilities: Computer Security Lectures 2014/15 S1

Information Gathering: Computer Security Lectures 2014/15 S1

Information Gathering: Computer Security Lectures 2014/15 S1

Post-exploitation: Computer Security Lectures 2014/15 S1

Post-exploitation: Computer Security Lectures 2014/15 S1

Lockpicking: Computer Security Lectures 2014/15 S1

Lockpicking: Computer Security Lectures 2014/15 S1

Privacy: Computer Security Lectures 2014/15 S1

Privacy: Computer Security Lectures 2014/15 S1

From Scanning to Exploitation: Computer Security Lectures 2014/15 S1

From Scanning to Exploitation: Computer Security Lectures 2014/15 S1

Ethics: Computer Security Lectures 2014/15 S1

Ethics: Computer Security Lectures 2014/15 S1

LCA2010: A New Paradigm for Protecting Yourself from Your Processes

LCA2010: A New Paradigm for Protecting Yourself from Your Processes

Linux is Freedom. Operating System Debate: Linux vs Microsoft Windows vs Apple

Linux is Freedom. Operating System Debate: Linux vs Microsoft Windows vs Apple