Lessons Learned from Black Hat’s Infrastructure - The Tweets Must Flow
Explore Black Hat's infrastructure, network challenges, and security measures. Learn about wired and wireless setups, threat modeling, and lessons for building robust conference networks.
What the HEC - Security Implications of HDMI Ethernet Channel and Other Related Protocols
Explore security implications of HDMI protocols like CEC and HEC, including potential vulnerabilities and corporate risks. Includes demonstration of CEC security testing tool.
For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems
Explore vulnerabilities in mobile point-of-sale systems, including MitM attacks, arbitrary code injection, and firmware exploitation. Learn to identify weaknesses and conduct security assessments in payment technologies.
Using SmartNICs to Provide Better Data Center Security
Explore SmartNIC-based data center security, featuring improved isolation, offload capabilities, and policy scaling. Learn about innovative host introspection techniques for enhanced threat detection and workload integrity.
The Commoditization of Security Solutions - Will You Be Replaced by a Small Script?
Explore the impact of security solution commoditization on the industry and professionals. Learn strategies to stay relevant in an evolving landscape.
Microservices and FaaS for Offensive Security
Explore offensive security using microservices and FaaS, covering Lambda, Google Cloud, IBM OpenWhisk, and more. Learn practical applications and improvements for cybersecurity projects.
Robust Defense for the Rest of Us
Discover practical strategies for robust network defense, tailored for small organizations with limited resources. Learn how to leverage flexibility and homefield advantage for effective cybersecurity.
Everything is Not Awesome - How to Overcome Barriers to Proper Network Segmentation
Overcome barriers to proper network segmentation with practical strategies, including the coin slot rail approach, to enhance security and maintain efficient internal traffic flow.
Empirical Exploitation
Explore empirical exploitation techniques, quantifying security research, and analyzing various attack vectors and vulnerabilities across networks and devices.
Cut the Sh-t - How to Reign in Your IDS
Learn to optimize your Intrusion Detection System (IDS) with expert techniques for sensor placement, rule customization, and traffic analysis, enhancing network security and reducing false positives.
What Reaction to Packet Loss Reveals About VPN
Explore VPN behavior under packet loss, analyzing timing patterns and network algorithms to understand security implications and potential vulnerabilities.
My Quest for Privileged Identity to Own Your Domain
Explore Active Directory vulnerabilities, attack techniques, and mitigation strategies in this comprehensive cybersecurity talk. Learn about reconnaissance, NTLM, Kerberos, and privilege escalation methods.
An Evolving Era of Botnet Empires
Explore the evolution of botnet empires, their lifecycle, functions, and detection methods. Learn about famous botnets, takedown attempts, and manual analysis techniques.
Hunting High-Value Targets in Corporate Networks
Learn effective techniques for identifying and targeting high-value assets within corporate networks, focusing on practical strategies, network complexity, and data discovery methods.
DYODE - Do Your Own Diode for Industrial Control Systems
Learn to build and implement data diodes for secure industrial control systems, covering hardware, software, workflows, and threat modeling.
The Risks of RDP and How to Mitigate Them
Explore RDP security risks, attacks, and mitigation strategies. Learn to deploy secure RDP servers and detect potential threats in Windows remote environments.
Authentication Challenges in SaaS Integration and Cloud Transformation
Explore authentication challenges in SaaS integration and cloud transformation, focusing on security pitfalls, unmanaged cloud identities, and the importance of cloud-based Identity Provider solutions.
Bypassing Advanced Device Profiling with DHCP Packet Manipulation
Explore advanced device profiling bypass techniques using DHCP packet manipulation for Network Access Control systems. Learn about implementation, mechanics, and risk mitigation strategies.
Critical Vulnerabilities in Network Equipment - Past, Present, and Future
Explore critical vulnerabilities in network equipment, from routers to firewalls. Learn about common patterns, historical context, and future trends in cybersecurity for these essential devices.
Stay Quantum Safe - Future-Proofing Encrypted Secrets
Explore quantum-safe cryptography's progress, standardization, and implementation in TLS, SSH, and VPN. Learn to future-proof encrypted data against potential quantum computer decryption.
Piercing the Veil - Server Side Request Forgery Attacks on Internal Networks
Explore esoteric SSRF entry points, internal service vulnerabilities, and mitigation strategies in ethical hacking and bug bounty programs.