Logo

Raising security awareness

  • Introduction
    • What?
    • Why?
    • How?
  • Identify vulnerabilities
  • Human-readable guides
  • Fun experiential workshops
  • Simulations

Pentesting

  • Introduction
    • What?
    • Why?
    • How?
  • Who?
    • The grove in the forest
  • Contracts and agreements
    • Service-level agreement (SLA)
    • Confidentiality agreement
    • Statement of work (SOW)
    • Master service agreement (MSA)
    • Non-disclosure agreement (NDA)
    • Rules of engagement (ROE)
    • Permission to test
  • Disclaimers
  • Scoping
    • Initial meeting example questions
    • Laws, regulations, policies
    • Compliance based testing
    • Special scoping considerations
    • Enumerate the in-scope assets
  • Rules of engagement
    • Overview
    • Rules of engagement in the cloud
    • Importance of liaison
    • Support resources
    • Budget
  • Target considerations
  • Scheduling and scope creep
    • Scheduling
    • Scope creep
  • Cloud pentesting policy restrictions

Bug bounty hunting

  • Introduction
    • What?
    • Why?
    • How?
  • State of the bug bounty hunting industry
  • Major platforms
    • Open Bug Bounty
    • Intigrity
    • YesWeHack
    • HackerOne
    • Bugcrowd
    • Synack
    • Cobalt
  • Private programs
  • Self-hosted program
  • Why (not) use a Bug Bounty platform?
    • Pros and cons for companies
    • Pros and cons for hunters
  • Asset types to hunt in
  • Scope, payouts, and response times
    • Program scope
    • Payout amounts
    • Response time

Red team

  • Introduction
    • What?
    • Why?
    • How?
  • Crown jewels
  • Teams and roles
  • Adversary emulation
  • Scope and objectives
    • Scope
  • Rules of engagement
  • Campaign planning
  • Concept of operation
  • Resource plan
  • Operations plan
  • Mission plan

Blue team

  • Introduction
    • What?
    • Why?
    • How?
  • Digital forensics law matters
    • International legal framework
    • National legal systems
    • Fundamental rights
    • Transborder search and surveillance
  • Digital forensics problems and challenges
    • ↑↑ Complexity
    • Preserving privacy
    • Legitimacy
    • ↑↑ Anti-forensics
  • Develop an incident response plan
    • How can I convince my organisation to invest in an incident response strategy?
  • Set up an incident response team (SIRT)
    • Resources
  • Communications are key
    • Lessons learned
    • Keep in touch
  • Security operations center in a nutshell
  • Set up a security operations team (SOC)
    • Difference between SIRT and SOC
    • Considerations
    • Resources
  • Measuring team effectiveness
    • SOC
    • SIRT
    • Resources

Purple team

  • Introduction
    • What?
    • Why?
    • How?
  • Threat hunting
  • Systems itineraries
    • Basic Linux exploits
    • Advanced Linux exploits
    • Linux kernel exploits
    • Basic Windows exploitation
    • Windows kernel exploitation
    • PowerShell exploitation
    • Getting shells without exploits
    • Post-exploitation in modern Windows environments
    • Next-generation patch exploitation
  • Walking hypervisor tracks
    • Hypervisors 101
    • Creating a research framework
    • Inside Hyper-V
    • Hacking hypervisors case study
  • Travel IoT networks of footpaths
    • Internet of Things to be hacked
    • Dissecting embedded devices
    • Exploiting embedded devices
    • Software-defined radio
  • Trekking the cloud
    • Hacking in Amazon Web Services
    • Hacking in Azure
    • Hacking containers
    • Hacking on Kubernetes

Hiking trails

  • Introduction
    • What?
    • Why?
    • How?
  • Hike trails in the forest with experts
  • Catch some free and low-budget train rides
  • Play some tabletop games underway
  • Build disposable environments based on your travels
  • Code your own tools
  • Make red team writeups
  • Make blue team writeups
  • Make green team writeups
Laws of the forest
  • Laws of the forest
  • Wizardry Unclass Writeups
  • Improbability Blog
  • About
  • Register
Unseen University, 2023, with a forest garden fostered by /ut7.