Date Author Title

CAPTURE THE FLAG CHALLENGE

2024-03-17Guy BruneauGamified Learning: Using Capture the Flag Challenges to Supplement Cybersecurity Training [Guest Diary]

CAPTURE

2024-03-17/a>Guy BruneauGamified Learning: Using Capture the Flag Challenges to Supplement Cybersecurity Training [Guest Diary]
2024-03-03/a>Guy BruneauCapturing DShield Packets with a LAN Tap [Guest Diary]
2022-02-13/a>Guy BruneauDHL Spear Phishing to Capture Username/Password
2020-05-31/a>Guy BruneauWindows 10 Built-in Packet Sniffer - PktMon
2017-09-17/a>Guy BruneaurockNSM as a Incident Response Package
2017-04-13/a>Rob VandenBrinkPacket Captures Filtered by Process
2016-11-05/a>Xavier MertensFull Packet Capture for Dummies
2009-11-18/a>Rob VandenBrinkUsing a Cisco Router as a “Remote Collector” for tcpdump or Wireshark
2008-04-16/a>William StearnsPasser, a aassive machine and service sniffer

THE

2024-06-20/a>Guy BruneauNo Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary]
2024-03-17/a>Guy BruneauGamified Learning: Using Capture the Flag Challenges to Supplement Cybersecurity Training [Guest Diary]
2023-02-16/a>Jan KoprivaHTML phishing attachment with browser-in-the-browser technique
2022-02-05/a>Didier StevensPower over Ethernet and Thermal Imaging
2022-02-01/a>Xavier MertensAutomation is Nice But Don't Replace Your Knowledge
2021-11-08/a>Xavier Mertens(Ab)Using Security Tools & Controls for the Bad
2021-10-18/a>Xavier MertensMalicious PowerShell Using Client Certificate Authentication
2021-06-24/a>Xavier MertensDo you Like Cookies? Some are for sale!
2021-05-29/a>Guy BruneauSpear-phishing Email Targeting Outlook Mail Clients
2020-04-16/a>Johannes UllrichUsing AppLocker to Prevent Living off the Land Attacks
2019-11-11/a>Johannes UllrichAre We Going Back to TheMoon (and How is Liquor Involved)?
2019-07-10/a>Rob VandenBrinkDumping File Contents in Hex (in PowerShell)
2019-01-30/a>Russ McReeCR19-010: The United States vs. Huawei
2018-11-20/a>Xavier MertensQuerying DShield from Cortex
2018-11-11/a>Pasquale StirparoCommunity contribution: joining forces or multiply solutions?
2018-06-04/a>Rob VandenBrinkDigging into Authenticode Certificates
2017-12-05/a>Tom WebbIR using the Hive Project.
2017-09-18/a>Johannes UllrichSANS Securingthehuman posted a follow up to their Equifax breach webcast: https://securingthehuman.sans.org/blog/2017/09/15/equifax-webcast-follow-up
2017-01-11/a>Johannes UllrichJanuary 2017 Edition of Ouch! Security Awareness Newsletter Released: https://securingthehuman.sans.org/ouch
2016-11-02/a>Rob VandenBrinkWhat Does a Pentest Look Like?
2016-10-07/a>Rick WannerFirst Hurricane Matthew related Phish
2016-09-15/a>Xavier MertensIn Need of a OTP Manager Soon?
2016-05-02/a>Rick WannerLean Threat Intelligence
2015-12-15/a>Russ McReeSecurity Management vs Chaos: Understanding the Butterfly Effect to Manage Outcomes & Reduce Chaos
2015-09-23/a>Daniel WesemannMaking our users unlearn what we taught them
2015-08-16/a>Guy BruneauAre you a "Hunter"?
2015-02-06/a>Johannes UllrichAnthem, TurboTax and How Things "Fit Together" Sometimes
2014-07-02/a>Johannes UllrichJuly Ouch! Security Awareness Newsletter Released. E-mail Do's and Don'ts http://www.securingthehuman.org/resources/newsletters/ouch/2014#july2014
2014-03-13/a>Daniel WesemannIdentification and authentication are hard ... finding out intention is even harder
2014-02-18/a>Johannes UllrichMore Details About "TheMoon" Linksys Worm
2014-02-05/a>Johannes UllrichSANS Ouch Security Awareness Newsletter What is Malware http://www.securingthehuman.org/ouch
2013-12-20/a>Daniel Wesemannauthorized key lime pie
2013-11-13/a>Johannes UllrichPacket Challenge for the Hivemind: What's happening with this Ethernet header?
2013-09-18/a>Rob VandenBrinkCisco DCNM Update Released
2013-09-09/a>Johannes UllrichSSL is broken. So what?
2013-09-05/a>Rob VandenBrinkBuilding Your Own GPU Enabled Private Cloud
2013-08-09/a>Kevin ShorttCopy Machines - Changing Scanned Content
2013-03-23/a>Guy BruneauApple ID Two-step Verification Now Available in some Countries
2013-02-06/a>Johannes UllrichIntel Network Card (82574L) Packet of Death
2013-02-04/a>Adam SwangerSAN Securing The Human Monthly Awareness Video - Advanced Persistent Threat (APT) http://www.securingthehuman.org/resources/ncsam
2012-10-26/a>Adam SwangerSecuring the Human Special Webcast - October 30, 2012
2012-07-10/a>Rob VandenBrinkToday at SANSFIRE (09 July 2012) - ISC Panel Discussion on the State of the Internet
2012-07-02/a>Dan GoldbergStorms of June 29th 2012 in Mid Atlantic region of the USA
2011-05-18/a>Bojan ZdrnjaAndroid, HTTP and authentication tokens
2011-04-28/a>Chris MohanGathering and use of location information fears - or is it all a bit too late
2011-04-11/a>Johannes UllrichLayer 2 DoS and other IPv6 Tricks
2011-01-12/a>Richard PorterHas Big Brother gone Global?
2010-12-21/a>Rob VandenBrinkNetwork Reliability, Part 2 - HSRP Attacks and Defenses
2010-09-21/a>Johannes UllrichImplementing two Factor Authentication on the Cheap
2010-07-24/a>Manuel Humberto Santander PelaezTransmiting logon information unsecured in the network
2010-07-21/a>Adrien de BeaupreDell PowerEdge R410 replacement motherboard firmware contains malware
2010-03-10/a>Rob VandenBrinkMicrosoft re-release of KB973811 - attacks on Extended Protection for Authentication
2010-02-09/a>Adrien de BeaupreWhen is a 0day not a 0day? Samba symlink bad default config
2009-11-11/a>Rob VandenBrinkLayer 2 Network Protections against Man in the Middle Attacks
2008-10-15/a>Rick WannerDay 15 - Containing the Damage From a Lost or Stolen Laptop
2006-10-05/a>John BambenekThere are no more Passive Exploits
2006-09-29/a>Kevin ListonA Report from the Field

FLAG

2024-03-17/a>Guy BruneauGamified Learning: Using Capture the Flag Challenges to Supplement Cybersecurity Training [Guest Diary]
2017-09-29/a>Lorna HutchesonGood Analysis = Understanding(tools + logs + normal)
2015-05-10/a>Didier StevensWireshark TCP Flags: How To Install On Windows Video
2015-04-05/a>Didier StevensWireshark TCP Flags

CHALLENGE

2024-03-17/a>Guy BruneauGamified Learning: Using Capture the Flag Challenges to Supplement Cybersecurity Training [Guest Diary]
2022-12-10/a>Didier StevensOpen Now: 2022 SANS Holiday Hack Challenge & KringleCon
2021-12-22/a>Brad DuncanDecember 2021 Forensic Contest: Answers and Analysis
2021-12-08/a>Brad DuncanDecember 2021 Forensic Challenge
2020-08-02/a>Didier StevensSmall Challenge: A Simple Word Maldoc
2017-12-27/a>Guy BruneauWhat are your Security Challenges for 2018?
2014-04-12/a>Guy BruneauInterested in a Heartbleed Challenge?
2013-12-28/a>Bojan ZdrnjaDRG online challenge(s)
2013-01-02/a>Chris MohanStarting the New Year on the right foot
2012-04-16/a>Mark BaggettChallenge: What can you do with Funky Directory Names (Part 2)
2012-04-11/a>Mark BaggettChallenge: What can you do with funky directory names?
2011-09-07/a>Lenny ZeltserAnalyzing Mobile Device Malware - Honeynet Forensic Challenge 9 and Some Tools
2010-12-23/a>Mark HofmanSkoudis' Annual Xmas Hacking Challenge - The Nightmare Before Charlie Brown's Christmas
2010-11-12/a>Guy BruneauHoneynet Forensic Challenge - Analyzing Malicious Portable Destructive Files
2010-07-13/a>Jim ClausingForensic challenge results
2010-06-04/a>Rick WannerNew Honeynet Project Forensic Challenge
2010-03-28/a>Rick WannerHoneynet Project: 2010 Forensic Challenge #3
2010-01-27/a>Raul SilesEuropean Union Security Challenge (Campus Party 2010)
2010-01-19/a>Jim ClausingForensic challenges
2009-07-27/a>Raul SilesNew Hacker Challenge: Prison Break - Breaking, Entering & Decoding
2008-03-25/a>Raul SilesNew Security Challenge - It Happened One Friday
2008-03-23/a>Johannes UllrichFinding hidden gems (easter eggs) in your logs (packet challenge!)