AI-Powered Application Penetration Testing—Scale Security Without Compromise Learn More

bishopfox-logo-grey
Get Started

Workshops & Training

Workshops & Training

Unredacter Challenge: Alejandro's Solution

Unredacter Challenge: Alejandro's Solution

Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as Alejandro showcases his solution.

Watch Workshop
Workshops & Training

Managing Application Security Risk with Threat Modeling

Managing Application Security Risk with Threat Modeling
Watch Workshop
Workshops & Training

13th B-Sides Las Vegas - ICS Security Assessments 101 or How da Fox I Test Dis?

13th B-Sides Las Vegas - ICS Security Assessments 101 or How da Fox I Test Dis?

We have seen many ICS attacks both in the news and in several talks at security conferences. They show how ICS protocols are insecure by default and how we can mess with control components so easily. However, from a consulting point of view, are we really asking our ICS clients to let us mess with their critical infrastructure just to show what we already know?

Watch Workshop
Workshops & Training

13th BSides Las Vegas - Management Hacking 101

13th BSides Las Vegas - Management Hacking 101

Tom Eston, AVP of Consulting at Bishop Fox, shares his best advice for becoming a successful manager and leader in the security industry.

Watch Workshop
Workshops & Training

SmogCloud: Expose Yourself Without Insecurity - Cloud Breach Patterns

SmogCloud: Expose Yourself Without Insecurity - Cloud Breach Patterns

Presented at Black Hat 2020, this presentation looks at the most pragmatic ways to continuously analyze your AWS environments and operationalize that information to answer vital security questions. Demonstrations include integration between IAM Access Analyzer, Tiros Reachability API, and Bishop Fox CAST Cloud Connectors, along with a new open source tool SmogCloud to find continuously changing AWS internet-facing services.

Watch Workshop
Workshops & Training

SmogCloud: Expose Yourself Without Insecurity - Cloud Breach Patterns

SmogCloud: Expose Yourself Without Insecurity - Cloud Breach Patterns

Black Hat USA 2020 presentation looks at pragmatic ways to answer vital security questions in your AWS environment.

Watch Workshop
Workshops & Training

Dufflebag Deep Dive: Uncovering Secrets in Exposed EBS Volumes

Dufflebag Deep Dive: Uncovering Secrets in Exposed EBS Volumes

In this video, Dan Petro demonstrates how the Bishop Fox open source tool Dufflebag works.

Watch Workshop
Workshops & Training

DerpCon 2020 - Demystifying Capture The Flags (CTF)s

DerpCon 2020 - Demystifying Capture The Flags (CTF)s
In the talk: Demystifying CTFs, Barrett Darnell will provide an overview of CTF formats, the skills they require and the experience they develop, and conclude with a plethora of CTF resources for those wanting to participate.
Watch Workshop
Workshops & Training

Ham Hacks: Breaking into the World of Software Defined Radio

Ham Hacks: Breaking into the World of Software Defined Radio

If you’re a hacker who has always been too afraid of RF protocols to try getting into SDRs, or you have a HackRF collecting dust in your closet, this talk will show you the ropes.

Watch Workshop
Workshops & Training

.NET Roulette: Exploiting Insecure Deserialization in Telerik UI

.NET Roulette: Exploiting Insecure Deserialization in Telerik UI
Telerik UI for ASP.NET AJAX is a widely used suite of UI components for web applications.
Watch Workshop
Workshops & Training

.Net Roulette Exploiting Insecure Deserialization in Telerik UI

.Net Roulette Exploiting Insecure Deserialization in Telerik UI

DerpCon 2020 presentation reviews how .NET deserialization works and how to get shells on real applications.

Watch Workshop
Workshops & Training

Ham Hacks: Breaking into the world of software-defined radio

Ham Hacks: Breaking into the world of software-defined radio

DerpCon 2020 presentation explores how to find, capture, and reverse-engineer RF signals.

Watch Workshop
Workshops & Training

Demystifying Capture the Flags (CTFs)

Demystifying Capture the Flags (CTFs)

DerpCon 2020 presentation on CTF formats, the skills they require, and the experience they develop.

Watch Workshop
Workshops & Training

Expose Yourself Without Insecurity: Cloud Breach Patterns

Expose Yourself Without Insecurity: Cloud Breach Patterns

Presentation from BSides Atlanta 2020 explores the unprecedented level of exposures in the Cloud and how they can be found.

Watch Workshop
Workshops & Training

Attacking the Data Before the Decision

Attacking the Data Before the Decision

Presentation from BSides Tampa 2020 explores the vulnerabilities of machine learning systems and how to mitigate them.

Watch Workshop
Workshops & Training

How to Write Like It's Your Job

How to Write Like It's Your Job

Presentation from BSides San Francisco 2020 offers practical advice for security writers.

Watch Workshop
Workshops & Training

Zigbee Hacking: Smarter Home Invasion with ZigDiggity

Zigbee Hacking: Smarter Home Invasion with ZigDiggity
Existing Zigbee hacking solutions have fallen into disrepair, having barely been maintained, let alone improved upon. Left without a practical way to evaluate the security of Zigbee networks, we've created ZigDiggity, a new open-source pentest arsenal from Bishop Fox.
Watch Workshop
Workshops & Training

Finding Secrets In Publicly Exposed EBS Volumes

Finding Secrets In Publicly Exposed EBS Volumes
In this talk, Ben Morris shows how he found all sorts of secrets and associated data—passwords, SSH private keys, TLS certificates, application source code, API keys, and anything else that might be stored on a server hard disk.
Watch Workshop
Workshops & Training

ZigDiggity: ZigBee Hacking Toolkit

ZigDiggity: ZigBee Hacking Toolkit

Presentation from Black Hat USA 2019 reveals an open-source pentest arsenal for Zigbee networks.

Watch Workshop
Workshops & Training

Ghost In The Browser - Broad-Scale Espionage With Bitsquatting

Ghost In The Browser - Broad-Scale Espionage With Bitsquatting

Presentation from Kapersky SAS 2019 on an unfortunate side effect to achieving HTTPS everywhere and learn what can be done to mitigate the risk.

Watch Workshop
Workshops & Training

Reverse Engineering Mobile Apps

Reverse Engineering Mobile Apps

Presentation from BSides Las Vegas 2019 demonstrates the successful exploitation of transit system mobile apps.

Watch Workshop
Workshops & Training

Twist & Shout: Ferris Bueller's Guide to Abuse Domain Permutations

Twist & Shout: Ferris Bueller's Guide to Abuse Domain Permutations

Presentation from Sqr00t 2019 explores the ins and outs of domain abuse, and how to prevent it.

Watch Workshop
Workshops & Training

Check Your Privilege (Escalation)

Check Your Privilege (Escalation)

Presentation from BSides Columbus 2019 discusses common privilege escalation paths on Linux systems.

Watch Workshop
Workshops & Training

Network Penetration Testing Toolkit: Netcat, Nmap, and Metasploit Basics

Network Penetration Testing Toolkit: Netcat, Nmap, and Metasploit Basics

Presentation from Day of Shecurity 2019 familiarizes you with the necessary tools to continue your ethical hacking journey.

Watch Workshop
Load More

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.