Resource library
A curated, searchable archive of released tools, conference presentations, and papers. Everything filters in your browser; nothing is sent to a server. Actively maintained tools link to GitHub.
-
Vulnerability Discovery with AI
presentationUsing large language models to find and reason about software vulnerabilities.
-
Hacks and Ethics: Stories of Questionable Decisions
presentationThree ethical challenges from a career in hacking, with frameworks for judging ethical behavior.
-
Hackventure: Having Fun with IDOR Attacks
presentationFinding and exploiting insecure direct object reference (IDOR) flaws in web applications.
-
Accidental Bug Discovery
presentationStumbling into security vulnerabilities, and turning accidental finds into lasting job security.
-
Cyanotype
presentationA ListonCon 2020 talk.
-
What You Need to Know: iOS 10
presentationSecurity changes practitioners should know about in iOS 10.
-
Android Stagefright
presentationThe Stagefright media-processing vulnerabilities in Android.
-
Generates a Microsoft Word index file from the speaker notes in PowerPoint decks.
-
Top 8 Steps for Mobile Security
presentationEight practical steps to improve mobile device security.
-
An Intense Look at the Mobile Computing Threat
presentationThe mobile computing threat landscape circa 2011.
-
Exploiting Modern WLANs
presentationAttacks against contemporary wireless LAN deployments.
-
News Corp and Mobile Device Hacks
presentationLessons from the News Corp phone-hacking scandal for mobile security.
-
Nurturing the Next Generation of Geeks
presentationEncouraging young people into technology and security.
-
Penetration Testing: The Perfect Storm, Part 6
presentationPart 6 of the Perfect Storm series, with a focus on Cisco environments.
-
Essential Crypto Without the Math
presentationApplied cryptography concepts for practitioners, without the heavy math.
-
Maximum Overdrive Redux
presentationPushing penetration-testing techniques to their limits.
-
ZigBee Exploited: The Good, the Bad, and the Ugly
presentationAttacking ZigBee and 802.15.4 networks, and the tooling that makes it practical.
-
KillerBee: Practical ZigBee Exploitation
presentationThe KillerBee framework for attacking ZigBee and 802.15.4 networks.
-
Penetration Testing: The Perfect Storm, Part 1
presentationPart 1 of a series combining network, wireless, and application attacks.
-
Pervasive Wireless Threats
presentationA tour of the wireless threat landscape.
-
Rewrites 802.11 packet captures into Ethernet-framed captures for analysis tools.
-
Bluetooth cryptographic tooling released with early Bluetooth security research.
-
FreeRADIUS patch that logs inner 802.1X credentials for authentication attacks.
-
High-Speed Wireless Security Risks
presentationSecurity implications of high-speed 802.11n wireless.
-
PEAP: Pwned Extensible Authentication Protocol
presentationPractical attacks against PEAP and weak 802.1X deployments.
-
Pervasive Wireless Threats (Intel)
presentationWireless threat briefing delivered at Intel.
-
Practical Wireless Security Threats
presentationHands-on wireless threats and defenses.
-
SharkFest 2008: Wireless Packet Analysis
presentationAnalyzing wireless traffic with Wireshark.
-
Security implications of 802.11n features such as frame aggregation.
-
The WPA-TKIP Attack
presentationHow the TKIP weaknesses in WPA can be attacked.
-
Condensed field reference for 802.11 frame formats and management operations.
-
Bluetooth Security
presentationAttacks and defenses for Bluetooth devices.
-
Can You Hear Me Now?
presentationSecurity weaknesses in cellular and voice communications.
-
Recovers passwords from EAP-MD5 exchanges captured live or from a packet capture.
-
ShmooCon 2007
presentationWireless security research presented at ShmooCon 2007.
-
Injects arbitrary 802.11 packets from binary files using LORCON.
-
Wireless Intrusion Detection
presentationDetecting attacks against wireless networks with a wireless IDS.
-
Wireless Security at Airheads
presentationWireless security briefing for the Aruba Airheads community.
-
Offline dictionary attack against WPA/WPA2-PSK by computing and comparing the PMK.
-
Four Ways to Own a WLAN
presentationFour practical paths to compromising a wireless network.
-
Migrating from WEP to WPA
presentationPractical guidance for moving wireless networks off WEP.
-
Recovers weak passwords from Cisco LEAP and generic MS-CHAPv2 exchanges.
-
Detecting the Detectors
presentationFinding wireless monitoring and detection systems on a network.
-
Book chapter on packet analysis with Ethereal (now Wireshark).
-
Attacking 802.11
presentationEarly survey of practical attacks against 802.11 wireless networks.
-
Background on intrusion detection and its wireless variants.
-
A Taste of SEC575, Part I
presentationPreview of the SEC575 mobile device security course, part I.
-
A Taste of SEC575, Part II
presentationPreview of the SEC575 mobile device security course, part II.
-
A Taste of SEC575, Part III
presentationPreview of the SEC575 mobile device security course, part III.
-
asleap: Attacking Cisco LEAP
presentationThe LEAP weakness and the asleap dictionary attack.
-
Weaknesses in Oracle database password hashing.
-
Budget Wireless Assessment with Kismet Newcore
presentationRunning a wireless assessment on a budget using open-source tools.
-
Building a Pen Test Career
presentationHow to build a career in penetration testing.
-
Building an InfoSec Career
presentationAdvice for building a career in information security.
-
Cisco Vulnerabilities
presentationVulnerabilities in Cisco network equipment.
-
Dynamic Analysis with Frida
presentationInstrumenting mobile apps at runtime with Frida (from SEC575).
-
Firmware Attacks
paperAttacking device firmware in embedded and wireless hardware.
-
GITD
presentationA HackFest talk.
-
How I Ruled the Word
presentationA talk on curiosity, hacking, and a career in security.
-
HT1-401 Session Materials
presentationSession materials archive (HT1-401).
-
iOS USB Restricted Mode
presentationHow iOS USB Restricted Mode works and what it means for forensics.
-
JWWG
presentationA talk (topic to be confirmed).
-
Kismet Newcore
presentationWireless discovery and monitoring with Kismet Newcore.
-
Detecting attacks at the wireless data-link layer.
-
Motorola Canopy Wireless Security
presentationSecurity assessment of Motorola Canopy fixed-wireless equipment.
-
Pen Test A-Go-Go
presentationA fast tour of practical penetration-testing techniques.
-
Penetration Testing: The Perfect Storm, Part 2
presentationPart 2 of the Perfect Storm penetration-testing series.
-
Penetration Testing: The Perfect Storm, Part 3
presentationPart 3 of the Perfect Storm penetration-testing series.
-
Penetration Testing: The Perfect Storm, Part 4
presentationPart 4 of the Perfect Storm penetration-testing series.
-
Penetration Testing: The Perfect Storm, Part 5
presentationPart 5 of the Perfect Storm penetration-testing series.
-
SANS Gold paper on practical incident handling.
-
Risk and Reward
presentationWeighing the risks and rewards of enterprise wireless.
-
An example ShmooCon paper submission.
-
Smart Grid AMI Attack and Defense Showdown
presentationAttacking and defending Advanced Metering Infrastructure in the smart grid.
-
Smart Meter Security War Stories
presentationLessons from real smart-meter security assessments.
-
Spaced Repetition with Anki
presentationUsing spaced-repetition flashcards to learn and retain technical material.
-
Strategies That Don't Work
presentationCommon wireless security strategies that fail in practice.
-
WIR-201: Wireless Security
presentationWireless security course session (WIR-201).
-
Wireless Device Fingerprinting
presentationIdentifying wireless devices by their behavioral and protocol fingerprints.
-
Wireless Threats and Practical Exploits
presentationSurvey of wireless threats with working exploits.
-
WLAN MAC Spoofing
paperMAC address spoofing on wireless networks and its detection.
-
WLAN Session Containment
paperHow wireless session-containment (deauth) mechanisms work.
-
Writing Technical Content
presentationPractical advice for writing clear technical material.
No resources match your search and filters.