2019-09-07

09:00

• 42: The answer to life, the universe, and everything offensive security

• Collect All the Data - Protect All the Things

• Catching Cyber Criminals – Investigative techniques to identify modern threat actors and the clues they leave behind during data breaches

• The $19.95 anonymous cyber profile

09:30

• Prepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty

10:00

• kubered - Recipes for C2 Operations on Kubernetes

• Lying in Wait: Discovering and Exploiting Weaknesses in Automated Discovery Actions

• COM Hijacking Techniques

• Build your own multi-user password manager using open source software

10:30

• No class, Low Tech, High damage

12:00

• Testing Endpoint Protection: How Anyone Can Bypass Next Gen AV

• Inter-chip communication - Testing end-to-end security on IoT

• Assumed Breach: A Better Model for Penetration Testing

• Early Detection Through Deception

12:30

• The quest for 10g IDS

13:00

• Adventures in Azure Privilege Escalation

• REST in Peace: Abusing GraphQL to Attack Underlying Infrastructure

• StringSifter: Learning to Rank Strings Output for Speedier Malware Analysis

• Swagger Defense

13:30

• Kerberoasting Revisited

14:00

• Breaking & Entering via SDR, or How I defeated Wiegend over UHF/VHF, or your apartment isn't safe...

• The “Art” of The BEC - What Three Years of Fighting Has Taught Us

• Practical Heuristic Exploitation

• Hacking While Blind.

14:30

• Choose Your Own TTX: Redefining the Incident Response Table Top Exercise

15:00

• Assessing IoT Surveillance - Arlo

• BloodHound: Head to Tail

• Full Steam Ahead: Serverless Hacking 101

• Hunting Phish Kits

15:30

• One woman's journey to CISO leveraging Social Engineering

16:00

• Next-gen IoT botnets - leveraging cloud implementations for shells on 500k IoTs

• Red Team Methodology: A Naked Look

• Five Mistakes We Wish Users Would Stop Making

• SharPersist: Windows Persistence Toolkit in C#

16:30

• Are you ready to leverage DevSecOps? Get ready and use it for good.

17:00

• Attacking with Automation: How Office 365 automation provides another new risk to the cloud

• API Keys, Now What?Taking the Pen Test Into the Amazon Cloud

• Shadow IT in the Cloud

17:30

• .NET Manifesto - Win Friends and Influence the Loader

18:00

• Confessions of an IT / OT Marriage Counselor