USB Flash Drive Forensics
Explore USB flash drive forensics, covering hardware, software, file systems, and forensic techniques. Learn about write blockers, Windows registry analysis, and open-source tools for digital investigations.
Systems Applications Proxy Pwnage
Explore SAP system vulnerabilities, compression algorithms, and attack techniques. Learn about authentication bypass, validation issues, and practical demonstrations for enhanced security awareness.
I Am Become Loadbalancer, Owner of Your Network
Explore load balancer architecture, deployment, and post-breach access. Learn to navigate systems, avoid detection, and exploit configurations across various platforms for enhanced network control.
The Risks of RDP and How to Mitigate Them
Explore RDP security risks, attacks, and mitigation strategies. Learn to deploy secure RDP servers and detect potential threats in Windows remote environments.
Authentication Challenges in SaaS Integration and Cloud Transformation
Explore authentication challenges in SaaS integration and cloud transformation, focusing on security pitfalls, unmanaged cloud identities, and the importance of cloud-based Identity Provider solutions.
Building CANtact Pro - An Open Source CAN Bus Tool
Explore the process of designing, developing, and launching an open-source CAN bus tool. Learn about PCB design, driver development, and the challenges of bringing hardware products to market.
Unmasking the Chameleons of the Criminal Underground
Unmasking cybercriminals' sophisticated techniques for account takeover attacks, focusing on machine fingerprint markets, their impact on Canadians, and strategies for protection against this growing threat.
Bypassing Advanced Device Profiling with DHCP Packet Manipulation
Explore advanced device profiling bypass techniques using DHCP packet manipulation for Network Access Control systems. Learn about implementation, mechanics, and risk mitigation strategies.
See Something, Say Something? - The State of Coordinated Vulnerability Disclosure in Canada’s Federal Government
Exploring coordinated vulnerability disclosure in Canada's federal government, highlighting gaps and recommending policy frameworks to enhance cybersecurity and protect security researchers.
Critical Vulnerabilities in Network Equipment - Past, Present, and Future
Explore critical vulnerabilities in network equipment, from routers to firewalls. Learn about common patterns, historical context, and future trends in cybersecurity for these essential devices.
AMITT - Defensive Framework to Counter Disinformation
Explore AMITT framework updates for combating disinformation, including new countermeasures. Learn about recent events and practical applications in influence operations defense.
Social Bots - Malicious Use of Social Media
Analyse de l'utilisation malveillante des médias sociaux pendant l'élection fédérale canadienne de 2019, examinant le rôle des bots sociaux dans la manipulation du discours politique et la désinformation.
Privacy Without Monopoly - Beyond Feudal Security
Exploring the tension between privacy and monopoly in tech, advocating for interoperability as a solution to enhance security without compromising user rights or enabling corporate dominance.
Damn GraphQL - Attacking and Defending APIs
Explore GraphQL security: attack vectors, defense strategies, and hands-on learning with the Damn Vulnerable GraphQL Application. Gain insights into protecting this emerging API technology.
Repo Jacking - How Github Usernames Expose Projects to RCE
Explore 'repo jacking', a widespread supply chain vulnerability affecting 70,000+ open-source projects. Learn its causes, exploitation methods, and mitigation strategies to protect your GitHub-dependent projects.
Cryptography Do's and Don'ts in 2021
Explore cryptographic best practices, common pitfalls, and secure implementations for random number generation, encryption, hashing, and more. Essential knowledge for designing and auditing cryptographic systems.
You're Not an Idiot
Explore imposter syndrome, self-doubt, and personal growth in tech. Learn to embrace uniqueness and overcome negative self-perceptions in this empowering talk.
How Crypto Gets Broken - by You
Explore cryptography fundamentals, encryption methods, and attack techniques in this comprehensive workshop. Learn about hashing, ciphers, and practical approaches to breaking crypto systems.
Unicode Vulnerabilities That Could Byte You
Explore Unicode vulnerabilities in web applications, including normalization, capitalization misuse, and encoding conversion risks. Learn about HostSplit, HostBond attacks, and Punycode exploitation.
Regions Are Types, Types Are Policy, and Other Ramblings
Explore innovative software hardening using typed region-based policies. Learn how to apply this approach to protect against vulnerabilities and enhance system security beyond traditional compiler techniques.
IOMMU and DMA Attacks
Exploring IOMMU and DMA attacks, focusing on security implications, operating system integration, and techniques to bypass protections, particularly on macOS up to version 10.12.4.