Mobile Self Defence
Explore mobile network vulnerabilities and learn self-defense strategies using SnoopSnitch, an Android app that detects common attacks like IMSI catchers and SIM exploits.
ECMA Script 6 from an Attacker's Perspective
Explore ECMA Script 6 from a security perspective, covering new language features, potential attack vectors, and strategies to mitigate risks in modern web browsers.
The Windows Sandbox Paradox
Explore Windows sandboxing challenges, security vulnerabilities, and OS limitations. Learn about unexpected behaviors, bugs in popular applications, and strategies for auditing sandbox implementations.
Hacking Your Cable TV Network
Explore cable TV network vulnerabilities and attacks, including analog and digital systems, IRD decoders, and management servers. Learn techniques for hijacking set-top boxes and remote shutdown.
Phoneypdf - A Virtual PDF Analysis Framework
Explore tools and techniques for analyzing malicious PDF files, including phoneypdf framework. Learn to leverage Adobe PDF DOM and XFA for deeper insights into PDF exploitation and JavaScript execution.
Multi-Value WiFi - What the Heck Is It
Explore multi-value WiFi, its security implications, and latest developments in cloud Wi-Fi. Learn to leverage wireless technology as a business driver and protect against threats in enterprise environments.
Fuzzing the Easy Way Using Zulu
Explore fuzzing binary protocols with Zulu, a GUI-based tool for easy capture, mutation, and replay. Learn its features and successful bug-finding applications.
O'Dea Assertions Untwining the Security of the SAML Protocol
Explore SAML protocol security, including XML signature attacks, attribute implementation, and fuzzing techniques. Learn to identify and mitigate vulnerabilities in SSO systems.
Advanced Smartphone Forensics
Explore advanced smartphone forensics techniques for iOS, Windows Phone, and BlackBerry, focusing on cloud backups, data encryption, and device tracking protocols.
Attacking WPA-WPA2 in the Cloud
Explore cloud-based techniques for cracking WPA/WPA2 Personal and Enterprise, leveraging massive compute power to perform large-scale dictionary attacks on wireless networks.
The Security Challenge
Keynote explores rising security challenges, sophisticated threats, and future risks in the digital economy, emphasizing the need for unified security to protect data and infrastructure.
Bug Bounty Programs - Crowd Sourcing Security
Explore Mozilla's bug bounty program, its history, benefits, and challenges. Learn how to implement similar programs and their advantages over black market alternatives.
Inception of Graphical Passwords
Explore innovative graphical password authentication, offering enhanced security and memorability compared to traditional alphanumeric methods. Learn implementation techniques and future possibilities.
SMS to Meterpreter - Fuzzing USB Modems
Explore innovative attacks on USB data modems, including fuzzing techniques and SMS payload execution. Learn about vulnerabilities, reverse engineering, and USB sniffing for offensive security research.
Introduction to Threat Modeling
Learn threat modeling basics, STRIDE model, and OWASP Threat Dragon in this interactive session. Gain practical skills to identify and mitigate security risks in software development.
Using k8s to Deploy Security Services in a Hostile World
Explore deploying security tools in challenging environments using Kubernetes for scalability and minimal customization. Learn a three-step plan and cloud setup process for inherited projects.
Attacking the Data Before the Decision
Explore AI's impact on stock market manipulation, machine learning models, and data security in financial trading systems.
Process is No One Hunting for Token Manipulation
Learn hypothesis-driven hunting techniques for detecting access token manipulation in Windows authentication, with practical case studies and demonstrations.
How to Influence Security Technology in Kiwi Underpants
Explore innovative security techniques for kiwi underpants, covering jailbreaks, Microsoft vulnerabilities, credential protection, and cryptography in this engaging and unconventional talk.
Hacking Identity - A Pen Tester's Guide to IAM
Learn pen testing techniques for Identity and Access Management systems, covering intelligence gathering, attack vectors, and security challenges in IAM implementations.
PowerShell Exploitation - PowerSploit - Bloodhound - PowerShellMafia - Obfuscation
Explore PowerShell exploitation techniques, including obfuscation and malware tactics. Learn to analyze logs, detect suspicious activities, and implement effective security measures.