Hacking the Unhackable - Pwning the Bitfi Crypto Wallet
Explore the security flaws in the Bitfi crypto wallet, learn from its mistakes, and understand best practices for secure device development and responsible disclosure.
Why Information Security Should Be Important to All of Us
Overview of information security's impact on daily life, from online shopping to e-commerce businesses. Emphasizes importance of personal security practices for protecting passwords, identity, and company reputation.
Probe to Pwn - Rookie Track
Explore mobile and wireless attack methods, from target identification to device compromise, and learn mitigation strategies to protect against various threats and vulnerabilities.
Crawling Metadata with Recon-ng
Explore metadata extraction using Recon-ng plugin metadamn.py, learning about its capabilities, challenges, and future developments in web reconnaissance.
InfoSec is a Board Responsibility
Elevate InfoSec to a governance issue by speaking 'board talk', addressing objections, and tailoring proposals to focus on measurable benefits, risk mitigation, and corporate objectives.
Introducing Opabinia - SSLAuditor4
Introducing Opabinia: An automated tool for comprehensive SSL and RDP security assessments, enhancing accuracy and efficiency in identifying vulnerabilities and expired certificates.
A Look at Modern Warfare
Explore the economic impact of cyber warfare compared to traditional military conflicts, analyzing cost-effectiveness and strategic implications in modern combat scenarios.
The Joy of Passwords
Explore password security, learn about vulnerabilities, and discover effective strategies for creating and managing strong passwords to enhance your online protection.
Run-Time Tools to Aid Application Security Assessments
Explore runtime tracing tools and techniques for application security assessments, enhancing your ability to uncover vulnerabilities in real-world testing scenarios.
Rise of the Vermilion - Cross-Platform Cobalt Strike Beacon Targeting Linux and Windows
Explore the first cross-platform Cobalt Strike re-implementation, Vermilion Strike, targeting both Linux and Windows in real-world attacks. Learn about this significant malware discovery.
JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s
Explore JavaScript obfuscation techniques and learn a method for detecting packers to identify obfuscated files, crucial for understanding modern security threats.
Red Teaming macOS Environments with Hermes the Swift Messenger
Explore the development of Hermes, a Swift implant for macOS red teaming, integrated with Mythic C2 framework. Learn about its capabilities and detection methods using Apple's ESF.
WireGuard from the Ground Up
Comprehensive overview of WireGuard: its implementation, protocol, cryptography, and comparison with other VPN solutions. Learn when and how to use this efficient end-to-end encryption tool.
Keynote - We Need More Mediocre Security Engineers
Challenging elitism in cybersecurity, this talk advocates for inclusivity and rethinking entry barriers to address growing demand and burnout in the field.
Hacker TikTok - Community, Creativity, and Controversy
Panel discussion exploring security-focused TikTok creators' experiences in bringing hacking awareness, humor, and community to a new audience, highlighting successes and challenges in this emerging frontier.
CISO Panel Discussion
Insightful discussion on building and scaling top security teams, exploring strategies for talent attraction, retention, and overcoming challenges in the cybersecurity industry.
Hook, Line and Sinker - Pillaging API Webhooks
Explore "Webhook Boomerang flaws" and learn how to exploit SSRF vulnerabilities in API webhooks, potentially compromising cloud credentials despite security measures.
Exposed Secrets - How Public Git Repositories and Docker Images Expose Millions of Secrets Like API Keys and Security Certificates Every Year
Uncover the alarming spread of exposed API keys and secrets in public repositories. Learn about research findings, causes, and implications for cybersecurity.
The Power of Guardrails - How to Slash Your Risk of XSS in Half
Discover how secure code defaults can significantly reduce XSS vulnerabilities and elevate overall security. Learn strategies to implement effective guardrails and minimize recurring security risks.
Ooga Booga - Avoiding Reinvention of the Wheel - Useful Security Tools and Lessons to Know
Discover Marie Kondo-inspired techniques for managing security challenges efficiently. Learn about useful tools and lessons to avoid reinventing the wheel in under-resourced security teams.
Practical Threat Hunting With Machine Learning
Explore practical applications of machine learning in threat hunting and detection, featuring case studies of high-value detections from two years of research and implementation.