Resource Center

This guide covers what to expect when engaging Bishop Fox to perform a Google Nest Security Assessment, including timeline, scoping, scheduling, and reporting.

This guide covers what to expect when engaging Bishop Fox to perform a Google Partner OAuth Application security assessment, including project timeline, onboarding and scoping, and deliverables.

Proved the impact of micro-segmentation in slowing attackers with a custom testing methodology.

Presented at Black Hat 2020, this presentation looks at the most pragmatic ways to continuously analyze your AWS environments and operationalize that information to answer vital security questions. Demonstrations include integration between IAM Access Analyzer, Tiros Reachability API, and Bishop Fox CAST Cloud Connectors, along with a new open source tool SmogCloud to find continuously changing AWS internet-facing services.

Black Hat USA 2020 presentation looks at pragmatic ways to answer vital security questions in your AWS environment.

In this video, Dan Petro demonstrates how the Bishop Fox open source tool Dufflebag works.

If you’re a hacker who has always been too afraid of RF protocols to try getting into SDRs, or you have a HackRF collecting dust in your closet, this talk will show you the ropes.

DerpCon 2020 presentation reviews how .NET deserialization works and how to get shells on real applications.

DerpCon 2020 presentation explores how to find, capture, and reverse-engineer RF signals.

DerpCon 2020 presentation on CTF formats, the skills they require, and the experience they develop.

When Google needed to ensure that their user data was being handled securely, they partnered with Bishop Fox to design a security assessment program that could validate the security posture of their 1,000+ G Suite partners. The result: the largest and most successful public third-party ecosystem testing program ever.

Presentation from BSides Atlanta 2020 explores the unprecedented level of exposures in the Cloud and how they can be found.

Presentation from BSides Tampa 2020 explores the vulnerabilities of machine learning systems and how to mitigate them.

Presentation from BSides San Francisco 2020 offers practical advice for security writers.

Secured a new voice-enabled speaker at launch by integrating security testing into every stage of development.

Presentation from Black Hat USA 2019 reveals an open-source pentest arsenal for Zigbee networks.

Presentation from Kapersky SAS 2019 on an unfortunate side effect to achieving HTTPS everywhere and learn what can be done to mitigate the risk.

Validated products against real-world attack scenarios, delivering the transparency and assurance promised to customers.