DerbyCon 2.0 Reunion (2012)

DerbyCon 2.0 Reunion took place Sept. 27, 2012 through Sept. 30, 2012 (10 years, 2 months ago) at an unknown location.

https://web.archive.org/web/20121118164228/http://derbycon.com:80/ [Internet Archive]
https://infocon.org/cons/DerbyCon/DerbyCon 2 2012/

Presentations

Friday, Sept. 28, 2012

13:30 - The Wild West
14:30 - Black Ops
18:00 - House of Cards
18:00 - 2FA-Enabled Fraud: Dissecting Operation High Roller
18:00 - Business Ramifications of Internet’s unclean conflicts
18:00 - Securing the Internet: YOU’re doing it wrong. (An INFOSEC Intervention)
18:00 - Rescuing the Prince of Persia from the Sands of Time
18:30 - How I Owned Your Vending Machine
19:00 - Nonverbal Human Hacking
19:00 - Information Overload, Future Shock, IBM & The Nature of Modern Crime
19:00 - Dirty Little Secrets Part 2
19:00 - The Hacker Ethos meets The FOSS Ethos
19:00 - The Patsy Proxy: Getting others to do your dirty work
19:30 - BYOD: “Bring Your Own Doom or Sane Business Decision?”
20:00 - Privilege Escalation with the Metasploit Framework
20:00 - Hacking Survival: So. You want to compute post-apocalypse?
20:00 - The Art and Science of Hacking Any Target
20:00 - SexyDefense – The Red Team tore you a new one. NOW WHAT?
20:00 - Doubt – Deceit – Deficiency and Decency – a Decade of Disillusionment
20:30 - Rapid Blind SQL Injection Exploitation with BBQSQL
21:00 - DNS Reconnaissance
21:00 - Hey, I just middled you, and this is crazy.
21:00 - Pentesting for non-pentesters: learning through virtual machines
21:00 - Is it time for another firewall or a security awareness program?

Saturday, Sept. 29, 2012

09:00 - The Evolution of HFC
09:00 - “Flex Your Rights: The Constitution & Political Activism in the Hacker Community”
09:00 - “Puff, Puff, Pass: Getting the Most Out of Your Hash” An Intro to Linux Post-Exploitation Fun With Windows Hashes
09:00 - ISO8583: How to pentest when given a target that is not your “normal” target.
09:00 - The Future of RE: Dynamic Binary Visualization
09:30 - Android in the Healthcare Workplace: A Case Study
10:00 - Social Zombies: Rise of the Mobile Dead
10:00 - Nice to Meet You
10:00 - Penetration Testing from a Hot Tub Time Machine
10:00 - Moar Anti-Forensics – Moar Louise
10:00 - Social Engineering Defense Contractors on LinkedIN & Facebook: Who’s plugged in to your employees?
11:00 - It’s Not Your Perimeter, It’s You That Sucks!
11:00 - Everything they told me about security was wrong
11:00 - Security Epistemology: Beliefs, Truth, and Knowledge in the Infosec Community
11:00 - Tactical Surveillance: Look at me now!
11:00 - Next Generation Web Reconnaissance
11:30 - Running a successful Red Team
13:00 - How to create a one man SOC
13:00 - Pwned in 60 Seconds, From Network Guest To Windows Domain Admin
13:00 - Managed Service Providers: Pwn One and Done
13:00 - Format String Vulnerabilities 101
13:30 - CounterSploit! (MSF as a defense platform)
14:00 - A Fool’s Game: Building an Awareness & Training Program
14:00 - “How screwed are we?”
14:00 - Building the Next Generation IDS with OSINT
14:00 - Off-Grid Communications with Android: Meshing the Mobile World
14:00 - Simple Security Defense to Thwart an Army of Cyber Ninja Warriors
14:30 - Beyond Strings – Memory Analysis during Incident Response
15:00 - 4140 Ways Your Alarm System Can Fail
15:00 - Security Vulnerability Assessments – Process and Best Practices
15:00 - RfCat: subghz or bust!
15:00 - Ma and Pa Sleep with the Door Unlocked: A Look at Information Security in the Small Business
15:00 - Vulnerability Spidey Sense – Demystifying Pen Testing Intuition
15:30 - Medical Device Security: Current State of the Art
16:00 - We go in over the phone lines, pop the firewall, drop in the hydra and wait for the money” and other movie lines that fail.
16:00 - Everything you wanted to know about Academia (But were too afraid to ask)
16:00 - Introducing the Smartphone Pentest Framework
16:00 - Creating A Powerful User Defense Against Attackers
16:00 - So you got yourself an InfoSec Manager job. Great! Now what?
16:30 - Breaking into Security
17:00 - The Badmin project: (Na-na-nanana Na-na-nanana BADMIN)
17:00 - Are You HIPAA to the Jive?: How Focus on HIPAA Compliance Over Better Security Practices Hurts Us All
17:00 - Hunting Evil
17:00 - Personal Darknet or How to get pr0n @ work
17:00 - What locksport can teach us about security
17:30 - An Introduction to Reverse Engineering with Ida Pro Free
18:00 - Doxing and Anti-Doxing: Information Reconnaissance for the Stalker and the Stalked
18:00 - SH5ARK ATTACK- taking a byte out of HTML5!
18:00 - The Glitch: Hardware With Hacking Made Easy
18:00 - Security Onion: Network Security Monitoring in Minutes
18:00 - Physical Drive-By Downloads

Sunday, Sept. 30, 2012

09:00 - Why Integgroll sucks at Python, and you can too!
09:00 - Separating Security Intelligence from Security FUD
09:00 - Ambush – Catching Intruders At Any Point
09:00 - Building Dictionaries and Destroying Hashes Using Amazon EC2
09:00 - Cookie Cadger: Taking Cookie Hijacking To A New Level
09:30 - Reconnaissance, Attacks, and Post-Exploitation
10:00 - Slow Down, Cowpoke: When Enthusiasm Outpaces Common Sense
10:00 - Dirty Red Team Tricks II
10:00 - Introduction to Metasploit Post Exploitation Modules
10:00 - Professional Pen Testing and Learning From Your Mistakes
10:30 - Hack Your Way Into A DoD Security Clearance
11:00 - Ghost in the Wires: The Unbelievable True Story of Kevin Mitnick’s Life as a the World’s Most Wanted Computer Hacker
11:00 - A look at Bad Social Engineering, and how we can do better
11:00 - Maturing The Penetration Testing Profession
11:00 - Write Your Own Tools With Python!
11:00 - Easy Passwords = Easy Break-Ins
11:30 - PHP Website Security, Attack Analysis, & Mitigations
13:00 - Intro to Linux System Hardening, and Applying it to BackTrack Linux
13:00 - Becoming Mallory – How to Win Creds and Influence Devices
13:00 - Building a Database Security Program
13:00 - Using McAfee Secure/TrustGuard as Attack Tools
13:00 - Alice in Exploit Redirection-land – A trip down the rabbit hole
13:30 - Appearance Hacking 101: The Art of Everyday Camouflage
14:00 - SQL Injection 101
14:00 - Why Isn’t Everyone Pulling Security, This is Combat
14:00 - Welcome to NinjaTel, press 2 to activate your device now
14:00 - Wielding Katana: A Live Security Suite
14:00 - Taming Skynet : Using the Cloud to Automate Baseline Scanning
14:30 - How I Learned To Stop Worrying and Love the Smart Meter
15:00 - SE me, SE you
15:00 - Sprinkler: IR
15:00 - Current Trends in Computer Law
15:00 - Think differently about database hacking

Unknown date

Presenters