Featured Workshops & Training
Workshop: Sliver - Getting Started & 1.6 Features
Watch an interactive workshop led by Bishop Fox Senior Security Consultant, Tim Ghatas, as we dive into Sliver, the open-source C2 framework making waves in Red Team ops.
Fuzzing: Get the buzz on fuzz testing in software development
This slide deck includes:
- Fuzzing Basics
- How Fuzzing Works
- Popular Fuzzing Tools
Unredacter Challenge: John L.'s Solution
Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as John L. showcases his solution.
Unredacter Challenge: Shawn A.'s Solution
Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as Shawn A. showcases his solution.
Unredacter Challenge: Alejandro's Solution
Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as Alejandro showcases his solution.
Managing Application Security Risk with Threat Modeling
13th B-Sides Las Vegas - ICS Security Assessments 101 or How da Fox I Test Dis?
We have seen many ICS attacks both in the news and in several talks at security conferences. They show how ICS protocols are insecure by default and how we can mess with control components so easily. However, from a consulting point of view, are we really asking our ICS clients to let us mess with their critical infrastructure just to show what we already know?
13th BSides Las Vegas - Management Hacking 101
Tom Eston, AVP of Consulting at Bishop Fox, shares his best advice for becoming a successful manager and leader in the security industry.
SmogCloud: Expose Yourself Without Insecurity - Cloud Breach Patterns
Presented at Black Hat 2020, this presentation looks at the most pragmatic ways to continuously analyze your AWS environments and operationalize that information to answer vital security questions. Demonstrations include integration between IAM Access Analyzer, Tiros Reachability API, and Bishop Fox CAST Cloud Connectors, along with a new open source tool SmogCloud to find continuously changing AWS internet-facing services.
SmogCloud: Expose Yourself Without Insecurity - Cloud Breach Patterns
Black Hat USA 2020 presentation looks at pragmatic ways to answer vital security questions in your AWS environment.
Dufflebag Deep Dive: Uncovering Secrets in Exposed EBS Volumes
In this video, Dan Petro demonstrates how the Bishop Fox open source tool Dufflebag works.
DerpCon 2020 - Demystifying Capture The Flags (CTF)s
Ham Hacks: Breaking into the World of Software Defined Radio
If you’re a hacker who has always been too afraid of RF protocols to try getting into SDRs, or you have a HackRF collecting dust in your closet, this talk will show you the ropes.