REST in Peace - Abusing GraphQL to Attack Underlying Infrastructure
Explore GraphQL vulnerabilities and attack methodologies, including object reference attacks, mutations, and query cost analysis, to enhance API security awareness.
Inter-Chip Communication - Testing End to End Security on IoT
Explore IoT security testing with a focus on inter-chip communication, using a smart lock as a case study. Learn practical techniques for analyzing and securing IoT devices.
Assumed Breach - A Better Model for Penetration Testing
Explore advanced penetration testing techniques using the Assumed Breach model, focusing on real-world tactics, domain fronting, and lateral movement strategies.
Stable 17 Early Detection Through Deception
Explore early detection techniques using deception strategies to enhance cybersecurity and protect against threats in this insightful presentation by Jason Nester.
Stable 18 - The Quest for 10g IDS
Explore the quest for 10g Intrusion Detection Systems, covering missed alerts, scientific approaches, resources, topology, and critical settings for enhanced network security.
Stable 19 Swagger Defense
Explore defensive strategies for Swagger-based APIs, focusing on security measures and best practices to protect against common vulnerabilities and attacks.
Breaking Entering via SDR - How I Defeated Wiegend over UHF VHF - Your Apartment Isn't Safe
Explore vulnerabilities in apartment security systems using Software-Defined Radio (SDR) to intercept and manipulate UHFVHF signals, potentially compromising Wiegand protocol-based access controls.
BloodHound - Head to Tail
Comprehensive overview of BloodHound tool for Active Directory security analysis, covering features, use cases, and advanced techniques for penetration testers and defenders.
Stable 23 Hunting Phish Kits
Discover techniques for identifying and analyzing phishing kits, enhancing your cybersecurity skills to protect against evolving online threats and scams.
The Art of the BEC - What Three Years of Fighting Has Taught Us
Insights from three years of combating Business Email Compromise (BEC) attacks, exploring tactics, trends, and effective defense strategies.
Assessing IoT Surveillance Arlo
Explore IoT surveillance vulnerabilities in Arlo devices, covering setup, components, attack surfaces, and security flaws. Learn about insufficient protections and potential exploits.
Hacking While Blind
Explore adaptive hacking techniques for visually impaired individuals, showcasing innovative approaches to cybersecurity and accessibility in technology.
Stable 22 Choose Your Own TTX Redefining the Incident Response Table Top Exercise
Redefine incident response with an innovative table-top exercise approach. Learn to establish goals, identify strengths and weaknesses, and create an alternate reality adventure map for effective training.
One Woman's Journey to CISO Leveraging Social Engineering
Explore one woman's path to becoming a CISO through social engineering techniques, offering insights and strategies for career advancement in cybersecurity.
Practical Heuristic Exploitation
Explore practical heuristic exploitation techniques with Kelly Villanueva, covering innovative approaches to identify and leverage vulnerabilities in systems and applications.
Stable 25 SharPersist Windows Persistence Toolkit in C
Explore a Windows persistence toolkit in C# for maintaining access to compromised systems, featuring techniques and strategies for covert operations.
Stable 26 - Are You Ready to Leverage DevSecOps - Get Ready and Use It for Good
Leverage DevSecOps effectively: Learn about software lifecycle, integration, training, and security best practices for developers and teams.
Shadow IT in the Cloud
Explore shadow IT challenges in cloud environments and learn strategies for managing unauthorized software and services to enhance organizational security.
Stable 30 Python - Two Birds with One Stone
Learn to write cleaner, more efficient Python code while enhancing security through abstract syntax trees and improved parsing techniques.
Invoke GreatBirdOfCommonKnowledge - Gathering What Is Scattered with ATTCK an Atomic Bird
Explore cybersecurity insights from Derbycon 2019, focusing on gathering scattered information using ATTCK and Atomic Bird methodologies for enhanced threat intelligence and defense strategies.
Rise of the Machines - Using Machine Learning with GRC
Explore machine learning applications in Governance, Risk, and Compliance (GRC) to enhance security and streamline processes in this insightful conference talk.