Towards a LangSec Aware SDLC
Explore integrating Language-theoretic Security principles into the Software Development Life Cycle for enhanced system security and robustness.
Exploiting the Unexploitable
Discover techniques for exploiting seemingly impenetrable systems, uncovering vulnerabilities, and enhancing cybersecurity defenses in this eye-opening exploration of advanced hacking methods.
The Joy of Sandbox Mitigations
Explore sandbox mitigations in cybersecurity, understanding techniques to bypass protective measures and enhance system defenses against potential threats.
Biohacker - The Invisible Threat
Explore the emerging threat of biohackers with surgically implanted offensive security tools. Learn about this unique cybersecurity challenge and strategies to address augmented humans in your environment.
Offensive Hunting - Using Blue Team Techniques in Red Team Ops
Explore offensive hunting techniques combining red and blue team approaches. Learn to leverage data from various sources during extensive red teaming operations for more effective penetration testing.
Whoami Priv - Show Me Your Privileges and I Will Lead You to SYSTEM
Explore Windows privilege escalation techniques, focusing on token manipulation and privilege abuse to achieve SYSTEM-level access. Learn about SeImpersonate, SeAssignPrimary, and the Juicy Potato exploit.
Who Watches the Watchmen - Adventures in Red Team Infrastructure Herding and Blue Team OPSEC Failures
Explore red team infrastructure management and blue team OPSEC failures. Learn about RedELK, a tool for controlling operations and detecting blue team activities during multi-month engagements.
DPAPI and DPAPI-NG Decrypting All Users’ Secrets and PFX Passwords
Discover groundbreaking techniques for decrypting DPAPI-protected data and SID-protected PFX files, revealing potential vulnerabilities in Windows systems and enterprise security.
BMS Is Destroyed by "Smart Button"
Explore vulnerabilities in KNX automation systems for smart buildings. Learn how intruders can exploit weaknesses to conduct attacks, manipulate configurations, and compromise entire networks.
Introduction to IoT Reverse Engineering
Introduction to firmware reverse engineering for IoT devices, focusing on information gathering, emulation environment setup, and analysis techniques. Includes a practical example using a home router.
RHme3 Hacking Through Failure
Exploring hardware hacking failures during RHme3 CTF challenge: building rigs, writing code, and overcoming obstacles. Insights on learning from setbacks in cybersecurity competitions.
Using Machines to Exploit Machines
Explore machine learning for offensive research: automate crash analysis, determine exploitability, and accelerate bug triage. Discover AI-driven techniques to enhance vulnerability detection and exploitation processes.
You Try to Detect Mimikatz
Explore mimikatz's capabilities beyond credential collection, understand its power, and learn detection strategies for this persistent post-exploitation tool.
NFC Payments - The Art of Relay & Replay Attacks
Exploring vulnerabilities in NFC payment systems, focusing on relay and replay attacks. Discusses security challenges and potential bypasses of tokenization in digital transactions.
No Win32_Process Needed - Expanding the WMI Lateral Movement Arsenal
Explore advanced WMI lateral movement techniques beyond Win32_Process, expanding the arsenal for threat actors and enhancing defensive strategies against sophisticated attacks.
How to Bring HID Attacks to the Next Level
Exploring advanced HID attack techniques using WHID Injector and P4wnP1, including design insights, feature comparisons, and defensive strategies for Blue Teams to detect and mitigate these sophisticated threats.
The Past, Present & Future of Enterprise Security
Evolution of enterprise security: from traditional methods to automated attacks. Explores sophisticated tactics, tools, and techniques reshaping Active Directory vulnerabilities and domain privilege escalation.
Hunting PBX for Vulnerabilities
Explore PBX vulnerabilities, their impact, and mitigation strategies. Learn about potential security threats and how to protect against them in various PBX systems.
To Serve Man - AI, Machine Learning & Deep Learning in Security
Explore AI, machine learning, and deep learning in cybersecurity through a lively debate. Experts discuss vendor claims, organizational readiness, and future implications, inviting audience participation.
Invoke-DOSfuscation - Techniques for S-level CMD Obfuscation
Explore advanced CMD obfuscation techniques used by threat actors, including string manipulation and encoding methods. Learn about new obfuscation approaches and their detection implications for cybersecurity professionals.
Mobile Operators vs. Hackers - New Security Measures for New Bypassing Techniques
Explore mobile network security measures and hackers' evolving techniques to bypass them. Learn about SMS Home Routing, signaling firewalls, and sophisticated attack methods in this insightful talk.