The 99c Heart Surgeon Dilemma
Explores common mistakes in penetration testing, comparing it to hiring a heart surgeon. Discusses issues faced by testers and customers, and examines if the industry has improved since 2011.
Reinvestigating PowerShell Attacks
Explore the evolution of PowerShell attacks, offensive techniques, and defensive strategies since 2014, including insights on Desired State Configuration for covert persistence and command and control.
Levelling Up Security at Riot Games
Explore Riot Games' innovative security program, focusing on feedback, self-service, and developer collaboration. Learn from successes and failures in implementing a hybrid infrastructure approach.
Advanced WiFi Attacks Using Commodity Hardware
Explore advanced WiFi attacks using modified firmware on off-the-shelf dongles and mobile phones. Learn about jamming techniques, man-in-the-middle attacks, and vulnerabilities in WPA-TKIP and WPA2 protocols.
Weaponizing the BBC Micro - Bit
Transforming BBC Micro:Bit into a powerful wireless attack tool for sniffing keystrokes, hijacking quadcopters, and interacting with 2.4GHz protocols. Open-source firmware enables affordable, portable RF hacking.
XFLTReaT - A New Dimension in Tunnelling
Explore XFLTReaT, an open-source tunnelling framework that simplifies network bypassing. Learn about its versatile modules, customization options, and potential applications in various scenarios.
Browser Exploits - Grab Them by the Collar
Explore a novel browser exploit detection technique using Live Network Stream Code Injection, offering agentless protection against modern browser-based attacks without OS API hooking or code injection.
How Hackers Changed the Security Industry and How We Need to Keep Changing It
Explore the transformative impact of hackers on cybersecurity and the ongoing need for industry evolution with insights from a leading expert.
Detecting Malware Even When It Is Encrypted
Innovative machine learning approach for detecting malware in encrypted HTTPS traffic using Bro IDS logs, without decryption. Focuses on behavioral features and connection 4-tuples for improved accuracy.
Secure Channels - Building Real World Crypto Systems
Explore secure channel cryptography, including key establishment, data protection, and essential properties. Learn about famous security bugs and recent improvements in SSH and TLS implementations.
An Overview of the CMS Brute-Forcing Malware Landscape
Explore CMS brute-forcing malware, focusing on WordPress attacks. Analyze prominent botnets, their capabilities, and a case study of Sathurbot. Learn detection methods for identifying and preventing these threats.
Smart Sheriff, Dumb Idea
Explore security vulnerabilities in parental control apps, focusing on Smart Sheriff's flaws and the broader implications for user privacy and data protection.
Hello to the Dark Side
Explore the intricacies of cybersecurity's dark side with expert L. Grecs, delving into advanced threats, ethical considerations, and cutting-edge defense strategies.
New Adventures in Active Defense, Offensive Countermeasures, and Cyber Deception
Explore innovative strategies in active defense and offensive cybersecurity with expert John Strand, uncovering cutting-edge techniques to protect and secure digital assets.
Hacking KPN - Lessons From The Trenches
Explore real-world cybersecurity challenges and solutions through KPN's hacking experience, offering valuable insights for security professionals and enthusiasts.
The Birth of a Discipline
Explore the origins and evolution of cybersecurity as a distinct academic discipline, tracing its development and impact on modern information protection practices.
Esoteric Web Application Vulnerabilities
Explore uncommon web application vulnerabilities with expert Andres Riancho. Gain insights into esoteric security flaws and enhance your penetration testing skills.
Decepticon
Explore Decepticon, an innovative cybersecurity tool for creating deceptive network environments to detect and analyze attacker behavior in real-time.
Unified DNS View to Track Threats
Explore innovative techniques for tracking cyber threats using a unified DNS view, enhancing network security and threat intelligence capabilities.
Desired State - Compromised
Explore advanced persistent threat techniques and defensive strategies in this cybersecurity talk by industry experts, focusing on real-world attack scenarios and countermeasures.
Hacking as Practice for Transplanetary Life in the 21st Century - How Hackers Frame the Pictures in Which Others Live
Explore how hacking skills prepare us for future challenges in space colonization and societal transformation, framing new perspectives on technology and human adaptation.