| Date |
Type |
Title |
Author |
Event |
| January 25, 2012 |
Slides |
Scanning Applications 2.0 - Next Generation Scan, Attacks and Tools
|
Sheeraj Shah
|
Black Hat DC 2008 |
| December 30, 2011 |
Slides |
Revolutions in Web Server/Application Assessments
|
|
Black Hat EU 2005 |
| December 30, 2011 |
Slides |
Defeating Automated Web Assessment Tools
|
Saumil Shah
|
Black Hat EU 2005 |
| December 21, 2011 |
Slides |
Automation - Deus ex Machina or Rube Goldberg Machine?
|
|
Black Hat USA 2005 |
| December 12, 2011 |
Slides |
When the Tables Turn
|
|
Black Hat EU 2004 |
| November 16, 2011 |
Slides |
JD's Toolbox: Fire & Water
|
|
Black Hat USA 2002 |
| November 07, 2011 |
Slides |
Web Assessment Tools
|
|
Black Hat Asia 2001 |
| November 05, 2011 |
Slides |
The Nessus Project
|
Renaud Deraison
|
Black Hat USA 2001 |
| October 20, 2011 |
Slides |
HTTP: Advanced Assessment Techniques
|
Saumil Shah
|
Black Hat Windows Security 2003 |
| October 05, 2011 |
Slides |
HTTP Fingerprinting and Advanced Assessment Techniques
|
Saumil Shah
|
Black Hat Federal 2003 |
| October 03, 2011 |
Slides |
Practical Vulnerability Assessments in a Distributed Federal Environment
|
Chris Hurley
|
Black Hat Federal 2003 |
| October 03, 2011 |
Slides |
Using Xprobe2 in a Corporate Environment
|
Ofir Arkin
|
Black Hat Federal 2003 |
| October 02, 2011 |
Slides |
The Challenges of Automated Web Application Scanning
|
Jeremiah Grossman
|
Black Hat Federal 2003 |
| September 10, 2011 |
Video |
Mastering the Nmap Scripting Engine
|
David Fifield
Fyodor
|
Black Hat USA 2010 |
| September 10, 2011 |
Paper |
Harder, Better, Faster, Stronger: Semi-Auto Vulnerability Research
|
Lurene Grenier
Richard Johnson
|
Black Hat USA 2010 |
| September 10, 2011 |
Audio |
Mastering the Nmap Scripting Engine
|
David Fifield
Fyodor
|
Black Hat USA 2010 |
| September 10, 2011 |
Paper |
Mastering the Nmap Scripting Engine
|
David Fifield
Fyodor
|
Black Hat USA 2010 |
| September 10, 2011 |
Slides |
Mastering the Nmap Scripting Engine
|
David Fifield
Fyodor
|
Black Hat USA 2010 |
| August 31, 2011 |
Slides |
Nmap NSE Hacking for IT Security Professionals
|
Marc Ruef
|
Hashdays 2010 |
| August 31, 2011 |
Video |
Nmap NSE Hacking for IT Security Professionals
|
Marc Ruef
|
Hashdays 2010 |
| July 13, 2011 |
Paper |
Make My Day – Just Run a Web Scanner: Countering The Faults of Typical Web Scanners Through Byte-code Injection
|
Toshinari Kureha
|
Black Hat EU 2007 |
| July 13, 2011 |
Slides |
Make My Day – Just Run a Web Scanner: Countering The Faults of Typical Web Scanners Through Byte-code Injection
|
Toshinari Kureha
|
Black Hat EU 2007 |
| February 08, 2011 |
Video |
Mastering the Nmap Scripting Engine
|
David Fifield
Fyodor
|
DEFCON 18 |
| February 08, 2011 |
Slides |
Mastering the Nmap Scripting Engine
|
David Fifield
Fyodor
|
DEFCON 18 |
| February 03, 2011 |
Video |
Katana: Portable Multi-Boot Security Suite
|
Jacco van Tuijl
|
DEFCON 18 |
| February 02, 2011 |
Slides |
Katana: Portable Multi-Boot Security Suite
|
Jacco van Tuijl
|
DEFCON 18 |
| February 02, 2011 |
Audio |
Katana: Portable Multi-Boot Security Suite
|
Jacco van Tuijl
|
DEFCON 18 |
| January 22, 2011 |
Video |
Seccubus – Analyzing vulnerability assessment data the easy way...
|
Frank Breedijk
|
DEFCON 18 |
| January 22, 2011 |
Audio |
Seccubus – Analyzing vulnerability assessment data the easy way...
|
Frank Breedijk
|
DEFCON 18 |
| January 21, 2011 |
Slides |
Seccubus – Analyzing vulnerability assessment data the easy way...
|
Frank Breedijk
|
DEFCON 18 |
| January 21, 2011 |
Paper |
Seccubus – Analyzing vulnerability assessment data the easy way...
|
Frank Breedijk
|
DEFCON 18 |
| December 25, 2010 |
Slides |
Web Scanners FOR THE WIN...
|
Louis Nyffenegger
|
Ruxcon 2010 |
| December 23, 2010 |
Slides |
Killing the Elephant in the Room - Enterprise Vulnerability Management Tactics
|
|
Ruxcon 2010 |
| December 18, 2010 |
Slides |
Realize More Value From Your Existing security Tools
|
Dave Millier
|
SecTor 2010 |
| December 18, 2010 |
Video |
Realize More Value From Your Existing security Tools
|
Dave Millier
|
SecTor 2010 |
| December 12, 2010 |
Video |
Do it yourself - Security Assessments made easy and FREE
|
John Andreadis
|
SecTor 2010 |
| December 06, 2010 |
Video |
400 Apps in 40 Days
|
Nish Bhalla
Sahba Kazerooni
|
SecTor 2010 |
| December 06, 2010 |
Slides |
400 Apps in 40 Days
|
Nish Bhalla
Sahba Kazerooni
|
SecTor 2010 |
| August 18, 2010 |
Audio |
Blinded by Flash: Widespread Security Risks Flash Developers Don't See
|
Prajakta Jagdale
|
Black Hat DC 2009 |
| May 04, 2010 |
Audio |
Metasploit Goes Web
|
Efrain Torres
|
DEFCON 17 |
| May 04, 2010 |
Slides |
Metasploit Goes Web
|
Efrain Torres
|
DEFCON 17 |
| May 04, 2010 |
Video |
Metasploit Goes Web
|
Efrain Torres
|
DEFCON 17 |
| February 18, 2010 |
Slides |
Pen Testing the Web with Firefox
|
Michael Schearer
|
Confidence 2009 Warszawa |
| February 17, 2010 |
Slides |
AutoNessus: analyzing vulnerability assessment data the easy way…
|
Frank Breedijk
|
Confidence 2009 Warszawa |
| January 01, 2010 |
Slides |
Revealing the Secrets: Source Code Disclosure, Techniques and Impacts
|
Anant Kochar
|
ClubHack2009 |
| December 31, 2009 |
Slides |
Mobile Application Security Testing
|
Gursev Singh Kalra
|
ClubHack2009 |
| December 19, 2009 |
Audio |
Hacking the EULA: Reverse Benchmarking Web Application Security Scanners
|
Tom Stracener
Marce Luck
|
DEFCON 15 |
| December 16, 2009 |
Audio |
Beyond Vulnerability Scanning - Extrusion and Exploitability Scanning
|
Matt Richard
Fred Doyle
|
DEFCON 15 |
| December 11, 2009 |
Audio |
Comparing Application Security Tools
|
Edward Lee
|
DEFCON 15 |
| November 23, 2009 |
Audio |
New Ideas for Old Practices - Port-Scanning Improved
|
|
DEFCON 16 |
| November 09, 2009 |
Audio |
Nmap: Scanning the Internet
|
Fyodor
|
DEFCON 16 |
| November 04, 2009 |
Audio |
Grendel-Scan: A new web application scanning tool
|
David Byrne
Eric Duprey
|
DEFCON 16 |
| November 03, 2009 |
Audio |
ModScan: A SCADA MODBUS Network Scanner
|
Mark Bristow
|
DEFCON 16 |
| September 06, 2009 |
Slides |
Gizmo: A Lightweight Open Source Web Proxy
|
Rachel Engel
|
Black Hat USA 2009 |
| September 06, 2009 |
Paper |
Gizmo: A Lightweight Open Source Web Proxy
|
Rachel Engel
|
Black Hat USA 2009 |
| July 30, 2009 |
Video |
Hacking the EULA: Reverse Benchmarking Web Application Security Scanners
|
Tom Stracener
Marce Luck
|
DEFCON 15 |
| July 30, 2009 |
Slides |
Hacking the EULA: Reverse Benchmarking Web Application Security Scanners
|
Tom Stracener
Marce Luck
|
DEFCON 15 |
| July 23, 2009 |
Video |
Beyond Vulnerability Scanning - Extrusion and Exploitability Scanning
|
Matt Richard
Fred Doyle
|
DEFCON 15 |
| July 07, 2009 |
Slides |
IPV6 Mapping
|
Yuji Ukai
|
PacSec 2006 |
| June 18, 2009 |
Video |
Comparing Application Security Tools
|
Edward Lee
|
DEFCON 15 |
| June 18, 2009 |
Slides |
Comparing Application Security Tools
|
Edward Lee
|
DEFCON 15 |
| May 12, 2009 |
Slides |
Cutting Through the Hype: An Analysis of Application Testing Methodologies
|
|
Black Hat EU 2009 |
| May 12, 2009 |
Paper |
Cutting Through the Hype: An Analysis of Application Testing Methodologies
|
|
Black Hat EU 2009 |
| May 02, 2009 |
Video |
Blinded by Flash: Widespread Security Risks Flash Developers Don't See
|
Prajakta Jagdale
|
Black Hat DC 2009 |
| May 02, 2009 |
Slides |
Blinded by Flash: Widespread Security Risks Flash Developers Don't See
|
Prajakta Jagdale
|
Black Hat DC 2009 |
| April 15, 2009 |
Slides |
Maximizing ROI on Vulnerability Management
|
Carole Fennelly
|
Source Conference Boston 2009 |
| April 14, 2009 |
Slides |
So you want to train an army of ninjas...
|
Dan Guido
|
Source Conference Boston 2009 |
| April 12, 2009 |
Video |
New Ideas for Old Practices - Port-Scanning Improved
|
|
DEFCON 16 |
| April 12, 2009 |
Slides |
New Ideas for Old Practices - Port-Scanning Improved
|
|
DEFCON 16 |
| March 29, 2009 |
Video |
Nmap: Scanning the Internet
|
Fyodor
|
DEFCON 16 |
| March 29, 2009 |
Slides |
Nmap: Scanning the Internet
|
Fyodor
|
DEFCON 16 |
| March 15, 2009 |
Video |
Grendel-Scan: A new web application scanning tool
|
David Byrne
Eric Duprey
|
DEFCON 16 |
| March 15, 2009 |
Slides |
Grendel-Scan: A new web application scanning tool
|
David Byrne
|
DEFCON 16 |
| March 15, 2009 |
Video |
ModScan: A SCADA MODBUS Network Scanner
|
Mark Bristow
|
DEFCON 16 |
| March 14, 2009 |
Slides |
ModScan: A SCADA MODBUS Network Scanner
|
Mark Bristow
|
DEFCON 16 |
| March 12, 2009 |
Video |
Pen-Testing is Dead, Long Live the Pen Test
|
Taylor Banks
|
DEFCON 16 |
| March 09, 2009 |
Slides |
Pen-Testing is Dead, Long Live the Pen Test
|
Taylor Banks
|
DEFCON 16 |
| January 03, 2009 |
Slides |
Network Vulnerability Assessments: Lessons Learned
|
Chris Goggans
|
ClubHack2008 |
| July 18, 2008 |
Paper |
Vulnerability Assessment Plus Web
Application Firewall (VA+WAF)
|
Jeremiah Grossman
|
|
| July 16, 2008 |
Paper |
Assessing Java clients with the BeanShell
|
|
|
| July 16, 2008 |
Paper |
Security Testing Applications through Automated Software Tests
|
|
|
| January 05, 2008 |
Paper |
Wireless Security Assessment and Penetration Testing Tools
|
|
|