Hack Wars - A New Hope
Jedi RAPst4r leads a fun-filled journey through the CyberUniverse, showcasing how to combat cyber threats with the help of allies. Learn about the "New Hope" in cybersecurity and its importance.
Security for Non-Unicorns
Strategies for uncovering, preventing, and managing security issues in legacy systems and code for established companies. Practical approaches to improving security in non-startup environments.
Rugged Software Engineering
Practical strategies for rapid and secure software development, addressing challenges in modern engineering organizations and emphasizing continuous deployment, vendor alerts, and language safety.
Technology, Privacy and the Law - New Challenges for Non-Profits
Explore challenges faced by crisis organizations in balancing information security, privacy, and legal compliance in the digital age, with insights on risks, attackers, and protective measures.
Baited Canaries - Monitoring Attackers with Active Beacons
Explore innovative techniques combining document viewing environments and canary tokens to detect and monitor potential attacks, gaining valuable insights into attacker behavior and victim interactions.
Enterprise Security API ESAPI 2.0 Crypto Changes
Explore ESAPI 2.0's cryptographic enhancements, including the shift from ECB mode and the importance of message authenticity in enterprise security.
Testing from the Cloud - Is the Sky Falling
Explore cloud-based web testing environments, their unique features, and future developments with OWASP Foundation expert Matt Tesauro.
Your Last Manual Assessment
Automate security assessments using browser hooks and Selenium, transforming manual tests into robust scripts ready for continuous delivery integration.
Intro to IoT Hacking
Learn essential techniques for IoT hacking, including firmware analysis and finding serial consoles. Gain insights into hardware vulnerabilities and start your journey in this exciting field of information security.
From Zero To Hero - Threat Modeling In 90 Minutes
Learn essential threat modeling techniques to identify and mitigate security risks in your systems, enhancing your ability to protect against potential vulnerabilities.
HeapLab Taster - GLIBC Heap Exploitation
Dive into GLIBC heap exploitation techniques with expert Max Kamper. Learn advanced memory corruption strategies and enhance your cybersecurity skills in this intensive session.
Introduction to GLIBC Heap Exploitation
Explore GLIBC heap exploitation techniques with expert Max Kamper. Learn essential concepts, attack vectors, and practical strategies for identifying and exploiting heap vulnerabilities in Linux systems.
Automating User Interaction With Sheepl - Soup To Nuts
Explore advanced techniques for automating user interactions using Sheepl, covering implementation strategies and practical applications for enhanced security testing and simulation.
Here Be Dragons - The AWS S3 Logging Minefields
Explore AWS S3 logging challenges and potential security risks in cloud storage. Learn strategies to navigate complex logging configurations and enhance data protection in AWS environments.
Security Research Teams - How To Manage, Grow And Retain Them
Estrategias para gestionar, desarrollar y retener equipos de investigación en seguridad, abordando desafíos como la contratación, motivación y alineación con objetivos empresariales.
Attacking Development Pipelines for Actual Profit
Explore CI/CD pipeline vulnerabilities and real-world attacks. Learn methodologies for identifying and exploiting weaknesses in development infrastructure for enhanced security.
Owning the Cloud Through SSRF
Explore cloud security vulnerabilities through SSRF attacks, focusing on metadata exploitation, CVE examples, and advanced techniques like DNS rebinding for comprehensive cloud protection.
The Billion Dollar IoT Attack No One Knows About
Uncover a massive, undisclosed IoT security breach with potential billion-dollar impact. Explore vulnerabilities, attack vectors, and implications for the IoT landscape.
Rebalance Every 10,000 Kilometers
Learn about information security at the 44CON conference, in under an hour.
Human Side-Channels and Their Implications for Security and Privacy
Explore human side-channels in security and privacy, examining vulnerabilities and implications for information protection in the digital age.
Hunting For Bugs, Catching Dragons
Explore advanced techniques for identifying and exploiting software vulnerabilities, with insights from a renowned security researcher on discovering high-impact bugs.