PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Winning CTFs: A Proving Ground at HackMex & Ekoparty

bishopfox.com | blog | #cloud | #cloud-security | #red-teaming | #ctf | #red-team | #offensive-security | #ekoparty | #hackmex
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox Mexico won HackMex Finals 2025 and the EkoParty Red Team Space CTF 2025, a third consecutive EkoParty title, via recon, hypothesis-driven exploitation, and cloud/IAM chaining.
Published
Collected

Related coverage

blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · bishopfox.com
The Top Reasons Security Leaders Choose Red Teaming
Why leaders choose red teaming: objective-based adversary emulation gives irrefutable proof of security efficacy, validates investments, challenges assumptions, and strengthens coordination.
blog · bishopfox.com
Red Teaming: 2023 Insights from the Ponemon Institute
Ponemon Institute findings from 664 practitioners: 47% rank Red Teaming among the most effective offensive strategies, valued for testing worst-case scenarios against real-world TTPs.
blog · bishopfox.com
Architecting An Offensive Security Blueprint: 2023 Insights From the Ponemon Institute
A Ponemon Institute survey of nearly 700 practitioners finds 64% met security and governance goals through offensive testing, with Red Teaming rated highly effective at improving preparedness.
blog · bishopfox.com
Red Teaming: The Ultimate Sanity Check for Security Teams
Bishop Fox makes the case for Red Teaming as the ultimate sanity check: objective-based adversary emulation that validates security programs and justifies spend instead of guessing how defenses hold.
Back