MIPS-X - The Next IoT Frontier
Explore MIPS-based IoT device research with a framework for efficient emulation, vulnerability analysis, and exploit development. Gain insights into CPU architectures, virtualization, and cross-compilation techniques.
Container Escape in 2021
Explore new methods for escaping privileged runc containers, focusing on cloud security vulnerabilities and innovative exploit techniques in container environments.
Scaling Up Offensive Pipelines
Innovative approach to offensive CI/CD pipelines for red and purple team operations, automating weaponization and evasion techniques using Infrastructure as Code and Kubernetes.
Chaos Drive - Briefly Known as Loki
Explore the intriguing world of Chaos Drive, formerly known as Loki, in this captivating presentation by Michael Rich on cutting-edge cybersecurity concepts and techniques.
CICD Security - A New Eldorado
Explore CI/CD security challenges and opportunities in this talk, covering potential vulnerabilities, attack vectors, and best practices for securing development pipelines.
Kubernetes Security 101 - Best Practices to Secure Your Cluster
Learn essential best practices for securing Kubernetes clusters, covering key vulnerabilities, attack vectors, and protective measures to safeguard containerized applications.
Practical Security in the Brave New Kubernetes World
Explore Kubernetes security vulnerabilities through hands-on recon and exploitation of clusters, sidecars, and supporting infrastructure. Learn practical techniques for compromising and persisting in real-world K8s environments.
From the Cluster to the Cloud and Back to the Cluster - Lateral Movements in Kubernetes
Explore Kubernetes lateral movements, identity types, and cluster-to-cloud authentication methods. Learn about real-world misconfigurations leading to cluster takeovers and prevention strategies.
Web Application Firewall Workshop
Hands-on workshop exploring Web Application Firewall bypass techniques, including encoding, SQL injection, protocol switching, and syntax alternatives. Practical exercises with in-depth explanations for each method.
Applying DevOps Principles for Better Malware Analysis
Leveraging DevOps principles to streamline malware analysis, automate lab setup, and enhance collaboration among security researchers for more efficient threat detection and response.
The New Wave of Deserialization Bugs
Explore deserialization vulnerabilities in Java, PHP, and Python. Learn to identify and mitigate risks in enterprise applications using practical examples and tools.
A Monitoring Platform for Kubernetes Cluster Security
Explore a centralized logging system for Kubernetes, enabling visualization of intracluster activity and detection of potential security threats through live demonstrations and open-source tools.
CVE-2018-9206 Workshop
Hands-on workshop exploring CVE-2018-9206 file upload vulnerability in Docker. Learn about causes, patches, and bypasses for this security flaw through practical exploitation exercises.
Red, Purple, and Blue Team Activity Using Azure
Hands-on workshop exploring Red, Blue, and Purple team activities using Azure components. Learn container deployment, routing, attack simulation, detection, and prevention techniques in a practical cybersecurity setting.
Application Security Opportunities and Challenges in a DevOps World
Panel discussion exploring application security challenges and opportunities in DevOps, featuring insights from industry leaders on integrating security into modern development practices.
DevSecOps - Automating Security in DevOps
Explore automating security in DevOps pipelines, integrating tools, creating a security culture, and preventing critical bugs through DevSecOps implementation and best practices.
Rapid Threat Model Prototyping - Threat Modeling for Agile & DevOps
Learn rapid threat model prototyping for Agile and DevOps environments. Explore security architectural analysis and design techniques to enhance your secure software development lifecycle.
Building a Security Platform with Elastic Stack - Part 1
Learn to build a security platform using Elastic Stack. Explore basic components, data ingestion tools, data management, and cluster security. Gain insights from an experienced developer on leveraging SIEM for effective security monitoring.
Secrets Management Using Hashicorp Vault
Explore Hashicorp Vault for secure secrets management with expert Rohit Salecha. Learn key concepts, implementation strategies, and best practices for protecting sensitive data in your applications and infrastructure.
#Eko2020 BSDar: Instalación, configuración y administración de OpenBSD en una VM (hands-on)
Guía práctica para instalar, configurar y administrar OpenBSD en una máquina virtual, con comandos y recursos adicionales proporcionados por la comunidad BSDar en #Ekoparty 2020.
Security Open Source Tools in Cloud Native
Explora vulnerabilidades en contenedores y herramientas de código abierto para DevSecOps en entornos cloud native. Aprende mejores prácticas y técnicas para detectar errores de configuración y mejorar la seguridad.