Blue Space - Open Threat Research - Roberto y Jose Luis Rodriguez - Ekoparty Security Conference - 2020
Exploración de Open Threat Research: colaboración global en seguridad informática mediante proyectos de código abierto, enfocado en desarrollo de detecciones y análisis de amenazas.
#EkoTV Sebastián Davidovsky: "Engaños digitales, víctimas reales"
Entrevista sobre ciberseguridad y concientización pública, explorando el libro "Engaños digitales, víctimas reales" y la importancia de educar sobre amenazas digitales a través de historias y medios accesibles.
Bounty Hunters - Jaime Restrepo: Lo que nadie te dijo antes de dedicarte al Bug Bounty - Ekoparty Security Conference - 2020
Descubre las realidades del Bug Bounty, consejos prácticos y estrategias para destacar en la búsqueda de vulnerabilidades en grandes empresas, basado en experiencias reales.
Shifting Left- Raise Your Security Bar! - Guido Rajngewerc & Martin Cuesta - Ekoparty Security Conference - 2020
Integración de seguridad en el ciclo de desarrollo ágil: herramientas y estrategias para detectar vulnerabilidades temprano, empoderando a los desarrolladores como actores clave en la seguridad del producto.
Anatomy of a Gopher - Binary Analysis of Go Binaries - Alex Useche - Ekoparty Security Conference - 2020
Explore Go binary analysis for IoT and edge computing, covering Go assembler, tools, and language constructs to enhance reverse engineering skills.
Hackeando Aplicaciones móviles de ¿Seguridad?
Demostración de vulnerabilidades en aplicaciones móviles de seguridad mediante ingeniería inversa e instrumentación dinámica, con casos de estudio reales de applockers, control parental y anti-robo.
Mobile Hacking - Gustavo "Puky" Sorondo: Mobile Hacking Tips - Ekoparty Security Conference - 2020
Consejos y trucos para testear la seguridad de aplicaciones móviles, incluyendo tráfico remoto, certificados SSL, apps híbridas y un caso práctico de hackeo a Starbucks.
#Eko2020 Bounty Hunters | Adrian Pedrazzoli: XSS de -1 a 0
Aprende técnicas básicas para detectar XSS, tipos, recursos necesarios y ejemplos de hallazgos en programas de Bug Bounty. Incluye recomendaciones prácticas para cazadores de recompensas.
Blue Team - Generando Visibilidad y Respondiendo Ante Ciberamenazas Desde un SOC
Metodología para detectar y responder ante ciberamenazas en organizaciones, abordando visibilidad, priorización y automatización desde un SOC. Incluye servicios, componentes y herramientas para una gestión eficaz.
Social Engineering - Emiliano Piscitelli: Pretextos y el Metodo P.I.C.O - Ekoparty Security Conference - 2020
Descubre cómo crear pretextos efectivos en ingeniería social utilizando el Método P.I.C.O. Aprende de ataques reales y mejora tus habilidades en esta charla de la Ekoparty Security Conference.
NetflOSINT- Taking an Often-Overlooked Data Source and Operationalizing It - Joe Gray - Hack in Paris
Explore NetflOSINT: Leveraging overlooked Netflow data for efficient network forensics. Learn extraction techniques, analysis methods, and tools to enhance threat hunting and intelligence gathering.
All Roads Lead to OpenVPN Pwning Industrial Remote Access Clients - Sharon Brizinov - Hack in Paris - 2021
Uncover critical vulnerabilities in industrial remote access solutions using OpenVPN, potentially leading to remote code execution. Learn about the risks and implications for cybersecurity.
Exploits in Wetware - R. Sell - Hack in Paris - 2019
Discover social engineering tactics, real-world attacks, and protective strategies. Learn about OSINT techniques, vishing strategies, and methods to safeguard organizations against evolving threats in this eye-opening presentation.
All Your GPS Trackers Belong to Us - C. Kasmi, P. Barre - Hack in Paris - 2019
Explore security vulnerabilities in GPS trackers, including traffic analysis, SMS configuration exploitation, protocol reverse engineering, and GPS signal spoofing. Learn about privacy risks and potential attack scenarios.
In NTDLL I Trust - Process Reimaging and Endpoint Security Solution Bypass - E. Carroll - Hack in Paris - 2019
Explore a new defense evasion technique, Process Reimaging, exploiting Windows OS vulnerabilities to bypass endpoint security solutions like Windows Defender. Learn attack vectors, weaponization, and protection recommendations.
Cracking the Perimeter with SharpShooter - Dominic Chell - Hack in Paris - 2019
Explore advanced payload generation techniques for red team engagements, including bypassing endpoint protections and evading sandboxing through innovative methods like XML stylesheets and COM.
IronPython... OMFG - Marcello Salvati - Hack in Paris - 2019
Explore dynamic .NET runtime access using Python, bypassing PowerShell restrictions for stealthy offensive operations in Windows environments.
Social Forensication: A Multidisciplinary Approach to Successful Social Engineering - J.Gray - Hack in Paris - 2019
Explore innovative social engineering techniques, including memory image analysis and rogue Wi-Fi attacks, along with defensive strategies and ethical considerations for cybersecurity professionals.
Abusing Google Play Billing for Fun and Unlimited Credits! - G. Lopes - Hack in Paris
Explore vulnerabilities in Google Play Billing API, analyzing real-world examples and demonstrating how attackers can bypass payment processes in popular Android games through reverse engineering.
Sneaking Past Device Guard - Philip Tsukerman - Hack in Paris - 2019
Explore techniques to bypass Windows 10's Device Guard, including VBA, trusted documents, and alternative execution vectors. Dive into internals of scripting engines and host processes.
Knockin' on IPv6's Doors - Fernando Gont - Hack in Paris - 2018
Exploring IPv6 security policies and their mismatches with IPv4, revealing real-world implications for dual-stacked sites through a wide-scale evaluation project.