Bootstrapping an Architectural Research Platform
Explore x86 architecture for security research: privileges, events, hypervisors, and emerging tech. Gain foundational knowledge to streamline your research setup and focus on key questions.
Advanced Incident Remediation Techniques
Explore advanced incident remediation techniques for large network breaches, including mass remediation and outrunning the attacker. Learn from real-world experiences to effectively handle complex security incidents.
What the HEC - Security Implications of HDMI Ethernet Channel and Other Related Protocols
Explore security implications of HDMI protocols like CEC and HEC, including potential vulnerabilities and corporate risks. Includes demonstration of CEC security testing tool.
Inside .NET Smart Card Operating System
Explore reverse engineering of .NET smart card operating systems, focusing on code analysis and communication protocols to uncover vulnerabilities and test security measures.
SexyDefense - Maximizing the Home-Field Advantage
Maximizing home-field advantage in cybersecurity through proactive defense, intelligence gathering, and attacker modeling. Learn to adapt strategies, set traps, and take initiative for effective protection.
For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems
Explore vulnerabilities in mobile point-of-sale systems, including MitM attacks, arbitrary code injection, and firmware exploitation. Learn to identify weaknesses and conduct security assessments in payment technologies.
Exploits with Scratch
Explore network exploitation using Scratch programming language, extending its capabilities to create exploits and fuzz vulnerable services through custom TCP/IP function blocks.
Using SmartNICs to Provide Better Data Center Security
Explore SmartNIC-based data center security, featuring improved isolation, offload capabilities, and policy scaling. Learn about innovative host introspection techniques for enhanced threat detection and workload integrity.
JARVIS Never Saw It Coming - Hacking Machine Learning in Speech, Text and Face Recognition
Explore hacking techniques for machine learning systems in speech, text, and facial recognition, including exploits, backdoors, and adversarial attacks. Live demo included.
Catch Me If You Can - Ephemeral Vulnerabilities in Bug Bounties
Explore ephemeral vulnerabilities in bug bounties, their impact, and how to identify and exploit them. Learn from real-world examples and strategies for continuous security assessment.
ARM Assembly and Shellcode Basics - Workshop
Comprehensive workshop on ARM assembly and shellcode creation, covering basics, execve() shell, and reverse shell. Includes hands-on practice with QEMU emulator and Raspberry Pi hardware.
Sex, Secret and God - A Brief History of Bad Passwords
Explore the evolution of password security, common pitfalls, and best practices for creating strong, memorable passwords in this informative cybersecurity talk.
Transfer Learning - Analyst-Sourcing Behavioral Classification
Explore advanced threat detection using AI and transfer learning techniques. Learn about active learning, data sharing, and improving phishing domain detection across organizations.
The Commoditization of Security Solutions - Will You Be Replaced by a Small Script?
Explore the impact of security solution commoditization on the industry and professionals. Learn strategies to stay relevant in an evolving landscape.
Measuring the Use and Abuse of Brain Wallets
Explore the security vulnerabilities of brain wallets in cryptocurrency, analyzing usage patterns, draining techniques, and implications for blockchain technology.
Microservices and FaaS for Offensive Security
Explore offensive security using microservices and FaaS, covering Lambda, Google Cloud, IBM OpenWhisk, and more. Learn practical applications and improvements for cybersecurity projects.
Koadic C3 - Windows COM Command & Control Framework
Explore Koadic C3, a Windows COM-based command and control framework. Learn about VBScript, threading, HTML applications, and lateral movement techniques for advanced penetration testing.
GO Forth And Reverse
Explore Go language reverse engineering challenges, tool limitations, and strategies for function recovery and string analysis. Learn heuristics and resources for effective Go binary analysis.
IATC Cyber Crisis Simulation
Participate in an immersive cyber crisis simulation led by experts, exploring decision-making, stakeholder dynamics, and geopolitical impacts in a high-stakes scenario.
Your Facts Are Not Safe with Us - Russian Information Operations as Social Engineering
Explore Russian information operations as social engineering, examining tactics, targets, and mitigation strategies. Learn about RT's role and the impact on public perception.
Hacking College, a Cybersecurity Career, and Certifications
Insights on navigating cybersecurity education, certifications, and career paths from Navy veteran Marcus Carey. Practical advice for aspiring professionals in the field.