Credential Harvesting Courses and Certifications

Ekoparty Security Conference

Flipping Bits - Weaponizing Domain Bitflips for Credential Harvesting

Explore bit-flipping attacks on domain names, discovering how manipulating single binary digits can lead to credential harvesting, token capture, and security vulnerabilities in cloud services.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Black Hat

Flipping Bits - Credential Harvesting Through Domain Bitflip Attacks

Explore how bit-flipping attacks on domain names can lead to credential harvesting, featuring the 'Certainly' tool for red-team engagements and essential defensive strategies against DNS exploitation.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Phishing Like a Monarch With King Phisher

Explore phishing techniques and defenses with King Phisher. Learn about campaign types, email crafting, credential harvesting, and advanced features for more effective security awareness training.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

John Hammond

Phishing for Passwords - Advent of Cyber Day 02

Discover phishing attack techniques and password security vulnerabilities through hands-on cybersecurity challenges in this TryHackMe Advent of Cyber walkthrough.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Phishing - Going from Recon to Credentials

Explore phishing techniques, from reconnaissance to credential harvesting, covering attack types, setup, deployment, and post-exploitation strategies. Learn about prevention, detection, and response measures.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

NahamSec

This Sneaky Malware Uses Cloudflare to Steal Your Password

Discover how malware leverages Cloudflare to steal passwords in this cybersecurity analysis, with insights on detection and prevention strategies.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Security BSides San Francisco

Catching the Phisherman

Uncover the largest credential harvesting campaign: its discovery, impact, and ongoing response. Gain insights into cybersecurity threats and investigative techniques.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

DefCamp

Back to the IoT Future - Where Marty Controls All Your Routers - DefCamp - 2017

Explore IoT security challenges and solutions in this DefCamp talk, covering historical attacks, current vulnerabilities, and future threats in the rapidly evolving landscape of connected devices.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Attacking Storage Services - The Lynchpin of Cloud Services

Explore cloud storage vulnerabilities and attack techniques, focusing on enumeration, identification, exploitation, and post-exploitation strategies for various cloud services.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

NDC Conferences

Flipping Bits: Your Credentials Are Certainly Mine

Explore the security implications of bit-flipping domain names as Stök & Joohoi demonstrate how registering altered versions of popular domains can harvest credentials, tokens, and sensitive data through their "Certainly" tool.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Black Hat

Tunnel Vision: Exploring VPN Post-Exploitation Techniques

Explore VPN post-exploitation techniques beyond network entry, examining how compromised Ivanti and Fortigate servers can be leveraged for credential theft, lateral movement, and persistent access.

• YouTube
• 36 minutes
• On-Demand
• Free Video

WEareTROOPERS

Beyond LSASS - Cutting Edge Techniques for Undetectable Threat Emulation

Discover advanced threat emulation techniques that bypass traditional LSASS detection methods for sophisticated cybersecurity testing and red team operations.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

Ignite - Open Source Tool for AWS Credential Gathering

Herramienta open source para automatizar la extracción de credenciales y claves de AWS de diversos servicios cloud, diseñada para facilitar el acceso inicial en entornos de nube.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

Windows Privilege Escalation Techniques - Ekoparty Summer Workshop 2024

Taller práctico de post-explotación en Windows, enfocado en técnicas de escalada de privilegios y ataques "Living off the land". Cubre recopilación de información, servicios inseguros, UAC bypass y automatización.

• YouTube
• 1 hour 54 minutes
• On-Demand
• Free Video