Recent Advances in IPv6 Security
Explore IPv6 security challenges, recent advancements, and best practices for secure deployment. Learn about potential vulnerabilities, attack vectors, and mitigation strategies in IPv6 networks.
Dissecting of Non Malicious Artifacts - One IP at a Time
Dissecting non-malicious artifacts from online malware scanners to reveal sensitive data leaks and build intelligence platforms. Explores the risks of security solutions sharing data with external services.
Hacking Driverless Vehicles
Explore vulnerabilities in autonomous vehicles, from sensors to decision-making systems. Learn about potential exploits and emerging vehicle-to-vehicle communication programs.
Exploits in Wetware
Exploits in Wetware: Unveiling social engineering tactics, OSINT techniques, and strategies to protect organizations from human-based vulnerabilities in cybersecurity.
5.256 Million Minutes in a Decade
Reflective keynote exploring a decade of cybersecurity challenges, assessing progress and persistent issues in the field since BruCon's inception.
Disrupting the Kill Chain
Comprehensive defense strategy for Windows environments, leveraging native Microsoft tools to disrupt cyber-attack kill chains. Covers detection, response, and automated remediation across various attack stages.
Hunting Android Malware - A Novel Runtime Technique for Identifying Applications
Novel Android malware detection technique analyzing application HEAP at runtime, identifying dangerous objects without APK access. Potential integration with Android Attestation Framework for real-time malicious app identification.
Finding 0days in Embedded Systems with Code Coverage Guided Fuzzing
Innovative fuzzing technique for embedded systems, overcoming challenges to discover critical vulnerabilities in network devices through emulation, dynamic binary instrumentation, and guided fuzzing.
When Lemon Markets, Imposter Syndrome & Dunning-Kruger Collide
Explore the challenges in organizational security and product development, and discover strategies for improvement in this insightful cybersecurity talk.
The 99c Heart Surgeon Dilemma
Explores common mistakes in penetration testing, comparing it to hiring a heart surgeon. Discusses issues faced by testers and customers, and examines if the industry has improved since 2011.
Reinvestigating PowerShell Attacks
Explore the evolution of PowerShell attacks, offensive techniques, and defensive strategies since 2014, including insights on Desired State Configuration for covert persistence and command and control.
Advanced WiFi Attacks Using Commodity Hardware
Explore advanced WiFi attacks using modified firmware on off-the-shelf dongles and mobile phones. Learn about jamming techniques, man-in-the-middle attacks, and vulnerabilities in WPA-TKIP and WPA2 protocols.
Weaponizing the BBC Micro - Bit
Transforming BBC Micro:Bit into a powerful wireless attack tool for sniffing keystrokes, hijacking quadcopters, and interacting with 2.4GHz protocols. Open-source firmware enables affordable, portable RF hacking.
XFLTReaT - A New Dimension in Tunnelling
Explore XFLTReaT, an open-source tunnelling framework that simplifies network bypassing. Learn about its versatile modules, customization options, and potential applications in various scenarios.
Browser Exploits - Grab Them by the Collar
Explore a novel browser exploit detection technique using Live Network Stream Code Injection, offering agentless protection against modern browser-based attacks without OS API hooking or code injection.
How Hackers Changed the Security Industry and How We Need to Keep Changing It
Explore the transformative impact of hackers on cybersecurity and the ongoing need for industry evolution with insights from a leading expert.
Detecting Malware Even When It Is Encrypted
Innovative machine learning approach for detecting malware in encrypted HTTPS traffic using Bro IDS logs, without decryption. Focuses on behavioral features and connection 4-tuples for improved accuracy.
Secure Channels - Building Real World Crypto Systems
Explore secure channel cryptography, including key establishment, data protection, and essential properties. Learn about famous security bugs and recent improvements in SSH and TLS implementations.
An Overview of the CMS Brute-Forcing Malware Landscape
Explore CMS brute-forcing malware, focusing on WordPress attacks. Analyze prominent botnets, their capabilities, and a case study of Sathurbot. Learn detection methods for identifying and preventing these threats.
Smart Sheriff, Dumb Idea
Explore security vulnerabilities in parental control apps, focusing on Smart Sheriff's flaws and the broader implications for user privacy and data protection.
Hello to the Dark Side
Explore the intricacies of cybersecurity's dark side with expert L. Grecs, delving into advanced threats, ethical considerations, and cutting-edge defense strategies.