Eval Villain - Simplifying DOM XSS and JS Reversing
Explore DOM XSS and JavaScript reversing techniques with insights on simplifying complex security concepts for practical application in web security.
Automating Windows Kernel Analysis With Symbolic Execution
Explore automated Windows kernel analysis using symbolic execution techniques for enhanced security and vulnerability detection.
Incident Response on macOS
Learn essential techniques for incident response on macOS, covering forensic collection, login items, kernel extensions, startup items, and more. Gain practical insights for effective Mac security management.
Securing the DOM from the Bottom Up
Explore techniques for securing web applications by fortifying the Document Object Model (DOM) against common vulnerabilities and attacks.
Stable 00 Bypassing MacOS Detections With Swift
Learn techniques for bypassing macOS detections using Swift, including command-line processes, API calls, and sandbox manipulation, with practical examples and developer insights.
Using Next Generation Fuzzing Tools - Fixing Bugs and Writing Memory Corruption Exploits
Explore next-gen fuzzing tools for bug fixing and memory corruption exploits. Learn about product security assessment, constraint solvers, and web scanning techniques.
REST in Peace - Abusing GraphQL to Attack Underlying Infrastructure
Explore GraphQL vulnerabilities and attack methodologies, including object reference attacks, mutations, and query cost analysis, to enhance API security awareness.
Inter-Chip Communication - Testing End to End Security on IoT
Explore IoT security testing with a focus on inter-chip communication, using a smart lock as a case study. Learn practical techniques for analyzing and securing IoT devices.
Stable 19 Swagger Defense
Explore defensive strategies for Swagger-based APIs, focusing on security measures and best practices to protect against common vulnerabilities and attacks.
Stable 26 - Are You Ready to Leverage DevSecOps - Get Ready and Use It for Good
Leverage DevSecOps effectively: Learn about software lifecycle, integration, training, and security best practices for developers and teams.
Shadow IT in the Cloud
Explore shadow IT challenges in cloud environments and learn strategies for managing unauthorized software and services to enhance organizational security.
Attacking with Automation - How Office 365 Automation Provides Another New Risk to the Cloud
Explore Office 365 automation risks, including Flow vulnerabilities, DLP concerns, and potential for botnet creation. Learn about monitoring, firewall bypasses, and scope creep in cloud security.
Stable 34 - Waking Up the Data Engineer in You
Explore threat intelligence, attack techniques, and data analysis for enhanced cybersecurity. Learn from an expert about remote services, OSEM, and effective data modeling strategies.
Next Gen IoT Botnets Leveraging Cloud Implementations for Shells on 500k IoTs
Explore next-gen IoT botnets utilizing cloud implementations to gain control over 500,000 IoT devices, presented by Alex Jay Balan at Derbycon 2019.
PyEWS - A Cross-Platform Python Package to Interact with Exchange Web Services
Explore pyews, a cross-platform Python package for interacting with Exchange Web Services, enabling seamless communication and data manipulation in Microsoft Exchange environments.
Securtle - The Security Turtle
Explore invisible risks in technology, learn about social contracts, and discover how to protect vulnerable users like children and the elderly from digital threats.
Metasploit Town Hall - Redubbed
Explore the latest developments and community insights in Metasploit, the popular penetration testing framework, during this informative town hall session from DerbyCon 9.0.
Cloudy with a Chance of SecOps
Explore cloud security operations challenges and solutions in this insightful talk, covering best practices for effective SecOps in cloud environments.
Destroy Everything
Explore destructive coding techniques and unconventional programming practices in this provocative talk on pushing the boundaries of software development.
Symbolically Executing a Fuzzy Tyrant
Explore symbolic execution and fuzzing techniques for software security analysis, focusing on practical applications and advanced methodologies.
Devaluing Cloud Breaches while Gaining Safe Harbor
Explore strategies to mitigate cloud breaches, including encryption, tokenization, and safe harbor regulations, while enhancing data security and compliance in cloud environments.