DerbyCon 3.0 All in the Family (2013)

DerbyCon 3.0 All in the Family took place Sept. 25, 2013 through Sept. 29, 2013 (11 years, 1 month ago) at an unknown location.

https://web.archive.org/web/20140208115221/http://www.derbycon.com/ [Internet Archive]
https://infocon.org/cons/DerbyCon/DerbyCon 3 2013/

Presentations

Friday, Sept. 27, 2013

09:00 - Scanning Darkly
10:00 - Kinetic Pwnage: Obliterating the Line Between Computers and the Physical World
12:00 - Pigs Don’t Fly – Why owning a typical network is so easy, and how to build a secure one.
12:00 - Look Ma, No Exploits! – The Recon-ng Framework
12:00 - Gen Y—Getting Them to Talk Rather than Text at Work
12:00 - Building An Information Security Awareness Program from Scratch
12:00 - Cognitive Injection: Reprogramming the Situation-Oriented Human OS
12:00 - It’s Only a Game: Learning Security through Gaming
12:30 - Battle Scars And Friendly Fire: Threat Research Team War Stories
13:00 - IOCAware – Actively Collect Compromise Indicators and Test Your Entire Enterprise
13:00 - Ooops, Now What? :: The Stolen Data Impact Model (SDIM)
13:00 - Finding The Signal in the Noise: Quantifying Advanced Malware
13:00 - Practical Exploitation Using A Malicious Service Set Identifier (SSID)
13:00 - Malware : testing malware scenarios on your network
13:00 - Unmasking Miscreants
13:30 - gitDigger: Creating useful wordlists from public GitHub repositories
14:00 - JTAGulator: Assisted discovery of on-chip debug interfaces
14:00 - Password Intelligence Project – Advanced Password Recovery and Modern Mitigation Strategies
14:00 - PowerShell and Windows Throw the Best Shell Parties
14:00 - Cash is King: Who’s Wearing Your Crown?
14:00 - Anti-Forensics: Memory or something, I forget.
14:00 - Applying the 32 Zombieland Rules to IT Security
14:30 - Owning Computers Without Shell Access
15:00 - Seeing red in your future?
15:00 - Security Sucks, and You’re Wearing A Nursing Bra
15:00 - Tizen Security: Hacking the new mobile OS
15:00 - Sixnet Tools: for poking at Sixnet Things
15:00 - The Mysterious Mister Hokum
15:00 - Windows 0wn3d By Default
16:00 - Android 4.0: Ice Cream “Sudo Make Me a” Sandwich
16:00 - RAWR – Rapid Assessment of Web Resources
16:00 - Abusing LFI-RFI for Fun,Profit and Shells
16:00 - Windows Attacks: AT is the new black
16:00 - Appsec Tl;dr
16:30 - Hardening Windows 8 apps for the Windows Store
17:00 - Decoding Bug Bounty Programs
17:00 - Intro to Dynamic Access Control in Windows Server 2012
17:00 - The High Risk of Low Risk Applications
17:00 - Hiding @ Depth – Exploring & Subverting NAND Flash memory
17:00 - How Good is Your Phish
17:00 - DIY Command & Control For Fun And *No* Profit
17:30 - Evolutionary Security – Embracing Failure to Attain “Good Enough”
18:00 - IPv6 is here (kind of), what can I do with it?
18:00 - Patching Windows Executables with the Backdoor Factory
18:00 - It’s Okay to Touch Yourself
18:00 - Identifying Evil: An introduction to Reverse Engineering Malware and other software
18:00 - DIY Forensics: When Incident Response Morphs into Digital Forensics
18:00 - Attacking the Next Generation Air Traffic Control System; Hackers, liquor and commercial airliners.
18:30 - ANOTHER Log to Analyze – Utilizing DNS to Discover Malware in Your Network
19:00 - Collaborative Penetration Testing With Lair
19:00 - Antivirus Evasion through Antigenic Variation (Why the Blacklisting Approach to AV is Broken)
19:00 - Dancing with Dalvik
19:00 - How Im going to own your organization in just a few days.

Saturday, Sept. 28, 2013

09:00 - Pass-The-Hash 2: The Admin’s Revenge
09:00 - Phishing Frenzy: 7 seconds from hook to sinker
09:00 - Hello ASM World: A Painless and Contextual Introduction to x86 Assembly
09:00 - Malware Automation
09:00 - Big Hugs for Big Data
09:00 - Panel: Building and Growing a Hacker Space
09:30 - Electronic Safe Fail: Common Vulnerabilities in Electronic Safes
10:00 - SO Hopelessly Broken: the implications of pervasive vulnerabilities in SOHO router products.
10:00 - What’s common in Oracle and Samsung? They tried to think differently about crypto.
10:00 - SQL injection with sqlmap
10:00 - Antivirus Evasion: Lessons Learned
10:00 - The Good Samaritan Identity Protection Project – www.thegsipp.org
10:00 - The Cavalry Is Us: Protecting the public good and our profession
10:30 - Some defensive ideas from offensive guys.
12:00 - The Internet of Things: Vulns, Botnets and Detection
12:00 - Put Me In Coach: How We Got Started In Infosec
12:00 - Is Auditing C/C++ Different Nowadays?
12:00 - Raising Hacker Kids: For Good or for Awesome
12:00 - Love letters to Frank Abagnale (How do I pwn thee let me count the ways)
12:00 - Burning the Enterprise with BYOD
13:00 - The Malware Management Framework, a process you can use to find advanced malware. We found WinNTI with it!
13:00 - Grim Trigger
13:00 - Getting the goods with smbexec
13:00 - Alice Goes Deeper (Down the Rabbit Hole) – Redirection 2.0
13:00 - The Message and The Messenger
13:00 - Getting Schooled: Security with no budget in a hostile environment.
14:00 - Emergent Vulnerabilities: What ant colonies, schools of fish, and security have in common.
14:00 - 50 Shades of RED: Stories from the “Playroom”
14:00 - Browser Pivoting (FU2FA)
14:00 - A n00bie’s perspective on Pentesting…
14:00 - Hack the Hustle!
14:00 - Shattering the Glass: Crafting Post Exploitation Tools with PowerShell
14:30 - My Security is a Graph – Your Arguement is Invalid
15:00 - Follow the Foolish Zebras: Finding Threats in Your Logs
15:00 - Cheat Codez: Level UP Your SE Game
15:00 - Taking the BDSM out of PCI-DSS Through Open-Source Solutions
15:00 - Why Your IT Bytes
15:00 - Beyond Information Warfare “You Ain’t Seen Nothing Yet”
15:00 - Operationalizing Security Intelligence in the Enterprise
15:30 - Security Training and Research Cloud (STRC)
16:00 - New Shiny in the Metasploit Framework
16:00 - Hacking Back, Active Defense and Internet Tough Guys
16:00 - Using Facial Recognition Software In Digital Forensics And Information Security
16:00 - Passive Aggressive Defense
16:00 - Stop Fighting Anti-Virus
16:30 - So you want to be a pentester?
17:00 - An Encyclpwnia of Persistence
17:00 - Everything you ever wanted to know on how to start a Credit Union, but were afraid to ask.
17:00 - How to Fight a War Without Actually Starting One
17:00 - The Art and Science of Hacking Any Organization
17:00 - Digital Energy – BPT
17:30 - An Anti-Forensics Primer
18:00 - A developer’s guide to pentesting
18:00 - Your Turn!
18:00 - What if Petraeus was a hacker? Email privacy for the rest of us
18:00 - Living Off the Land: A Minimalist’s Guide to Windows Post-Exploitation
18:00 - Crypto-Exploit Exercises: A tool for reinforcing basic topics in Cryptography
18:30 - First line of defense

Sunday, Sept. 29, 2013

08:00 - Cracking Corporate Passwords – Exploiting Password Policy Weaknesses
08:00 - Steal All of the Databases.
08:00 - Practical File Format Fuzzing
08:00 - How the Grid Will Be Hacked
09:00 - After SS7 its LTE
09:00 - help for the helpdesk
09:00 - Ownage From Userland: Process Puppeteering
09:00 - Surviving the Dead
11:00 - ‘) UNION SELECT `This_Talk` AS (‘New Exploitation and Obfuscation Techniques’)%00
11:00 - Weaponizing your Coffee Pot
11:00 - Sandboxes from a pen tester’s view
11:00 - How can I do that? Intro to hardware hacking with an RFID badge reader
12:00 - A SysCall to ARMs
12:00 - Practical OSINT
12:00 - iOS.reverse #=> iPwn Apps
12:00 - Exploiting_the_Zeroth_Hour(); Developing your Advanced Persistent Threat to Pwn the Network
13:00 - Stop making excuses; it’s time to own your HIV (High Impact Vulnerabilities)
13:00 - Phishing Like The Pros
13:00 - Terminal Cornucopia
13:00 - The Netsniff-NG Toolkit
14:00 - Raspberry Pi, Media Centers, and AppleTV
14:00 - Why Dumpster Dive when I can pwn right in?
14:00 - Uncloaking IP Addresses on IRC
14:00 - Wait; How is All This Stuff Free?!?

Unknown date

Presenters