AppSec Enigma and Mirage - When Good Ideas Can Go Awry
Explore AppSec challenges, data breaches, and best practices. Learn from real-world examples and industry insights to enhance your application security knowledge and strategies.
Put a Socket in It - Understanding and Attacking Sockets on Android
Explore Android socket programming, security implications, and techniques for identifying and analyzing sockets. Learn about different socket types and their uses in Android development.
Hacking Web Apps
Learn essential techniques for identifying and exploiting common web application vulnerabilities, enhancing your cybersecurity skills and understanding of web security.
Hacking Web Apps
Learn techniques for identifying and exploiting web application vulnerabilities, focusing on practical methods to enhance security testing skills.
Don't Be Stupid with GitHub - Metacortex
Learn best practices for secure GitHub usage, avoiding common pitfalls and protecting sensitive information in repositories. Enhance your development workflow and safeguard your projects.
Binary Defense Without Privilege
Learn techniques for implementing binary defense without privileged access, covering code patching, stack overflow prevention, sandboxing, and network filtering.
Open Source Malware Lab
Learn to build and use an open-source malware analysis lab with tools like Cuckoo Sandbox, Thug, Bro, and Volatility Framework for effective threat detection and analysis.
Intro to Mobile Device Testing
Learn essential techniques for testing mobile devices, covering key aspects of security assessment and vulnerability identification in mobile applications.
Its Not a Sprint
Explore strategies for sustainable long-term success in information security, emphasizing the importance of pacing and continuous improvement over quick fixes and burnout.
Breaking the Teeth of Bluetooth Padlocks
Explore vulnerabilities in Bluetooth padlocks and learn techniques to bypass their security measures, enhancing your understanding of IoT device weaknesses.
Security Automation in Your Continuous Integration Pipeline
Explore security automation in continuous integration pipelines, covering tools, implementation, and best practices for integrating security testing into development workflows.
The WiX Toolset - How to Make Your Own MSIs
Learn to create Windows installers using WiX Toolset. Explore XML structure, product elements, package attributes, directory layouts, and component grouping for efficient MSI authoring.
Process Ventriloquism
Explore process manipulation techniques for Windows, including API methods, library injection, hooking, and memory scraping. Learn to inject Python interpreters for advanced control.
Bridging the Gap or How I Learned to Stop Worrying and Love the Developers
Learn strategies to improve collaboration between security teams and developers, fostering better communication and integration of security practices into the development process.
Threat Modeling for Secure Software Design
Learn threat modeling techniques to identify and mitigate security risks in software design. Enhance your ability to create secure applications through systematic analysis and proactive planning.
Expanding Your Toolbox the DIY Way
Explore DIY hacking tools, improve code, and build your own toolkit. Learn from mistakes, enhance functionality, and create cleaner outputs for more effective cybersecurity practices.
Keynote Rob Joyce
Explore the evolving cyber landscape with NSA's Rob Joyce, covering IoT, mobile tech, and cloud computing. Gain insights on network security challenges and emerging trends.
Super Bad Mobile Hacking
Explore mobile hacking techniques and vulnerabilities with expert Aaron Guzman in this comprehensive session from BSides Augusta 2016.
Automating Malware Analysis for Threat Intelligence
Explore automated malware analysis techniques for threat intelligence, including kill chain concepts, Python coding, and C2 clustering to enhance cybersecurity defenses.
Detection of Malicious Capabilities Using YARA
Explore YARA for malware detection, covering heuristics, memory analysis, and comparison with other frameworks. Learn to create effective rules for identifying malicious capabilities.
Metasploit Fuzzing and Exploit Development
Learn advanced Metasploit techniques for fuzzing and exploit development, covering overflows, stack manipulation, and shellcode creation. Gain practical skills inspired by Derbycon's founding.