Being Powerful While Powerless - Elevating Security by Leading Without Authority
Strategies for implementing security measures and fostering a security-conscious culture as a lone security professional, emphasizing soft power, automation, and cross-departmental collaboration.
Reversing Client Side JavaScript Using the Chrome Dev Tools Protocol
Explore Chrome Dev Tools protocol for JavaScript reversal, bug finding, and vulnerability detection. Learn to modify web app behavior and automate pentesting tasks using Go-based plugins.
A Stratagem on Strategy - Rolling Testing into Product Testing
Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.
Being a Cyberdefender - Behind the Curtains
Explore the realities of cyberdefense, including incident management, communication challenges, and maintaining work-life balance in this insightful talk by a seasoned professional.
Bypassing Microsoft Defender for Identity
Explore techniques to bypass Microsoft Defender for Identity, executing high-impact attacks across the kill chain while avoiding detection in on-premises Active Directory environments.
A Black-Box Security Evaluation of the SpaceX Starlink User Terminal
Exploración de seguridad del terminal Starlink: vulnerabilidades, ataques de inyección de fallas y acceso root. Análisis de la red Starlink y sus implicaciones para futuras investigaciones.
Android Malware Targeting Belgian Financial Apps
Explore Android malware's evolution, focusing on banking trojans targeting Belgian apps. Learn about various malware types, their mechanisms, and strategies for protection.
Chasing the White Whale of Malware
Exploring techniques to identify and analyze operational technology malware, focusing on unique challenges and methods for filtering OT binaries without advanced reverse engineering skills.
ECOS Offensive Security Research Logbook
Explore eCos RTOS security, from firmware analysis to exploitation and persistence. Learn techniques for cable modem research, including memory corruption, shellcode development, and implant creation.
Automating Binary Analysis with Ghidra's P-Code
Explore automated binary analysis using Ghidra's P-Code, an intermediate language that enables architecture-independent scripting for reverse engineering and vulnerability research.
Tales from Professional Thieves
Professional thieves share insider techniques for bypassing physical security, including sneaking in, fake badges, and social engineering, along with entertaining stories from real-world engagements.
Internet Scale Analysis of AWS Cognito Security
Análisis de seguridad a escala de Internet de configuraciones de AWS Cognito, revelando vulnerabilidades comunes y acceso no autorizado a recursos de AWS. Incluye demostraciones, metodología y recomendaciones para desarrolladores.
It Takes a Village
Strategies for building diverse security teams, addressing hiring challenges, and fostering talent through mentorship and professional development in the rapidly evolving cybersecurity landscape.
Security Transition from 4G to 5G - Are We Secure Enough?
Exposición de vulnerabilidades en protocolos 5G/4G, afectando operadores y dispositivos. Demostraciones de ataques de secuestro, degradación y agotamiento de batería. Discusión de soluciones y interacciones con proveedores.
Cloud SIEM - What Happened and What's Next?
Explore cloud SIEM's impact on cybersecurity, from real-time threat detection to AI-driven responses. Learn how this technology reshapes security teams, risk management, and the future of threat hunting.
Using Blue Team Techniques in Red Team Ops
Innovative techniques for advanced red team operations, including infrastructure management, blue team detection, and dynamic adjustments to enhance effectiveness and evasion.
Process Control through Counterfeit Comms
Explore vulnerabilities in PLCs, focusing on discovery methods and how combining minor flaws can lead to device takeover. Learn about SNMP exploitation, memory manipulation, and firmware modification.
Forging Trusts for Deception in Active Directory
Explore forging trusts in Active Directory for deception-based defense. Learn techniques to implant decoy objects, trap adversaries, and enhance network security through live demonstrations.
All Your Cloud Are Belong To Us – Hunting Compromise in Azure
Explore cloud security vulnerabilities, attack tactics, and proactive measures for Azure and AWS. Learn about hunting compromised systems and securing cloud marketplaces.
Signatures Are Dead - Long Live Resilient Signatures
Insights on creating resilient, high-fidelity threat detections that withstand evasion attempts, with practical examples from real-world attacks and methodologies for effective detection development.
Social Engineering for Penetration Testers
Explore social engineering techniques, their evolution, and practical applications in penetration testing. Learn from real-world examples and scenarios to enhance your security assessment skills.