Release It!
Explore DevOps challenges, new patterns, and anti-patterns in modern software development with insights from "Release It!" author Michael Nygard and Java Champion Trisha Gee.
Better Tests at GitHub and Commodore 64 Music
Explore GitHub's engineering culture, test analysis, and monolithic architecture. Discover the impact of Commodore 64 music on software development and the importance of simplicity in coding.
Streamlining Large-Scale Java Development Using Error Prone
Explore Error Prone and Refaster for automated Java code refactoring, bug detection, and pattern enforcement. Learn to streamline large-scale development and take control of your codebase efficiently.
Testing Patience
Explore challenges to testing orthodoxy in microservices, transient code, and functional programming. Reflect on future testing practices and their impact on software development.
Cloud Chaos and Microservices Mayhem
Explore cloud and microservices challenges, learn new management models, and discover how contract testing can enhance robustness and independent deployment in microservices architecture.
Bug Hunting with Static Code Analysis
Explore automated techniques for identifying security flaws in source code, from simple scripts to advanced analyzers, and learn to integrate them into continuous integration systems for early bug detection.
Continuous Security Testing in a DevOps World
Explore continuous security testing in DevOps using BDD-Security framework. Learn to specify requirements, create executable tests, and integrate with CI/CD for on-demand security assessments.
CI - CD With SAST And DAST For Embedded Devices
Explore automated security testing for embedded devices using FOSS, commercial tools, and creative solutions. Learn to implement CI/CD with SAST and DAST for multiple device families at scale.
Fuzzing - Finding Your Own Bugs and 0days
Aprenda a criar e usar um fuzzer para encontrar bugs e vulnerabilidades, incluindo técnicas para escrever exploits e obter acesso a sistemas. Demonstrações práticas incluídas.
The Road Towards 365 Bugs in Microsoft Office 365
Discover vulnerabilities in Microsoft 365 applications, including cross-tenant privacy leaks, SQLi, CSRF, SSRF, and XSS. Learn bug hunting techniques and tips for testing new Office 365 features.
Fuzzing Javascript Engines for Fun and Pwnage
Discover methods for finding vulnerabilities in Javascript Engines through fuzzing techniques, including crash classification, parallel fuzzing, and custom pattern generation for enhanced web browser security.
Fuzzing the Windows Kernel
Explore Windows kernel fuzzing architecture, from test-case generation to crash collection. Learn about distributed fuzzing design for effective scaling in this insightful presentation on kernel security.
Runtime Memory Analysis Tool for Mobile Apps
Runtime memory analysis tool for mobile apps, automating common checks during penetration testing. Simplifies reverse engineering of obfuscated code for iOS and Android, tracking app behavior changes in real-time.
Introducing ARM-X - The ARM IoT Firmware Emulation Framework
Explore ARM-X, an IoT firmware emulation framework for testing and vulnerability discovery. Learn its evolution, use cases, and future directions in IoT security research and development.
HDMI - Pwning HDMI For Fun And Profit
Explore HDMI vulnerabilities through protocol analysis, fuzzing techniques, and real-world exploitation, showcasing potential security risks in AV devices and demonstrating practical attack vectors.
Rooting Routers Using Symbolic Execution
Explore advanced techniques for exploiting router vulnerabilities using symbolic execution, uncovering potential security flaws in network devices.
Attacking Software Tokens
Exploring vulnerabilities in software OTP tokens, demonstrating reverse engineering techniques and exploits for major vendors' tokens, and assessing obfuscation effectiveness.
Automated Testing of Gameplay Features in 'Sea of Thieves'
Discover how automated testing improved 'Sea of Thieves' development and learn its potential benefits for other game studios and developers.
Assassin's Creed Origins - Monitoring and Validation of World Design Data
Explore Ubisoft's innovative approach to world design data management in Assassin's Creed: Origins, featuring automated tests and visual reports for efficient team communication and quality assurance.
Hack In The Studio - Fireside Chat
Fireside chat with security experts Cristofaro Mune and Adam Laurie, discussing their extensive experience in hardware hacking, embedded systems security, and reverse engineering techniques.
When Fuzzing Meets SAP Network Services
Exploring fuzzing techniques for SAP network services, overcoming challenges in performance, protocol complexity, and crash reproduction to discover critical vulnerabilities in custom network protocols.