DerbyCon 3.0 All in the Family (2013)

DerbyCon 3.0 All in the Family took place Sept. 25, 2013 through Sept. 29, 2013 (10 years, 10 months ago) at an unknown location.

https://web.archive.org/web/20140208115221/http://www.derbycon.com/ [Internet Archive]
https://infocon.org/cons/DerbyCon/DerbyCon 3 2013/

Presentations

Friday, Sept. 27, 2013

09:00 - Scanning Darkly
10:00 - Kinetic Pwnage: Obliterating the Line Between Computers and the Physical World
12:00 - Look Ma, No Exploits! – The Recon-ng Framework
12:00 - Gen Y—Getting Them to Talk Rather than Text at Work
12:00 - Cognitive Injection: Reprogramming the Situation-Oriented Human OS
12:00 - It’s Only a Game: Learning Security through Gaming
12:00 - Building An Information Security Awareness Program from Scratch
12:00 - Pigs Don’t Fly – Why owning a typical network is so easy, and how to build a secure one.
12:30 - Battle Scars And Friendly Fire: Threat Research Team War Stories
13:00 - Unmasking Miscreants
13:00 - Malware : testing malware scenarios on your network
13:00 - Finding The Signal in the Noise: Quantifying Advanced Malware
13:00 - Practical Exploitation Using A Malicious Service Set Identifier (SSID)
13:00 - IOCAware – Actively Collect Compromise Indicators and Test Your Entire Enterprise
13:00 - Ooops, Now What? :: The Stolen Data Impact Model (SDIM)
13:30 - gitDigger: Creating useful wordlists from public GitHub repositories
14:00 - PowerShell and Windows Throw the Best Shell Parties
14:00 - Anti-Forensics: Memory or something, I forget.
14:00 - Applying the 32 Zombieland Rules to IT Security
14:00 - Cash is King: Who’s Wearing Your Crown?
14:00 - Password Intelligence Project – Advanced Password Recovery and Modern Mitigation Strategies
14:00 - JTAGulator: Assisted discovery of on-chip debug interfaces
14:30 - Owning Computers Without Shell Access
15:00 - Tizen Security: Hacking the new mobile OS
15:00 - Seeing red in your future?
15:00 - The Mysterious Mister Hokum
15:00 - Sixnet Tools: for poking at Sixnet Things
15:00 - Windows 0wn3d By Default
15:00 - Security Sucks, and You’re Wearing A Nursing Bra
16:00 - RAWR – Rapid Assessment of Web Resources
16:00 - Windows Attacks: AT is the new black
16:00 - Appsec Tl;dr
16:00 - Abusing LFI-RFI for Fun,Profit and Shells
16:00 - Android 4.0: Ice Cream “Sudo Make Me a” Sandwich
16:30 - Hardening Windows 8 apps for the Windows Store
17:00 - How Good is Your Phish
17:00 - Decoding Bug Bounty Programs
17:00 - The High Risk of Low Risk Applications
17:00 - Intro to Dynamic Access Control in Windows Server 2012
17:00 - DIY Command & Control For Fun And *No* Profit
17:00 - Hiding @ Depth – Exploring & Subverting NAND Flash memory
17:30 - Evolutionary Security – Embracing Failure to Attain “Good Enough”
18:00 - Patching Windows Executables with the Backdoor Factory
18:00 - It’s Okay to Touch Yourself
18:00 - DIY Forensics: When Incident Response Morphs into Digital Forensics
18:00 - Attacking the Next Generation Air Traffic Control System; Hackers, liquor and commercial airliners.
18:00 - Identifying Evil: An introduction to Reverse Engineering Malware and other software
18:00 - IPv6 is here (kind of), what can I do with it?
18:30 - ANOTHER Log to Analyze – Utilizing DNS to Discover Malware in Your Network
19:00 - Dancing with Dalvik
19:00 - Antivirus Evasion through Antigenic Variation (Why the Blacklisting Approach to AV is Broken)
19:00 - How Im going to own your organization in just a few days.
19:00 - Collaborative Penetration Testing With Lair

Saturday, Sept. 28, 2013

09:00 - Pass-The-Hash 2: The Admin’s Revenge
09:00 - Panel: Building and Growing a Hacker Space
09:00 - Malware Automation
09:00 - Big Hugs for Big Data
09:00 - Phishing Frenzy: 7 seconds from hook to sinker
09:00 - Hello ASM World: A Painless and Contextual Introduction to x86 Assembly
09:30 - Electronic Safe Fail: Common Vulnerabilities in Electronic Safes
10:00 - The Good Samaritan Identity Protection Project – www.thegsipp.org
10:00 - SQL injection with sqlmap
10:00 - What’s common in Oracle and Samsung? They tried to think differently about crypto.
10:00 - Antivirus Evasion: Lessons Learned
10:00 - SO Hopelessly Broken: the implications of pervasive vulnerabilities in SOHO router products.
10:00 - The Cavalry Is Us: Protecting the public good and our profession
10:30 - Some defensive ideas from offensive guys.
12:00 - The Internet of Things: Vulns, Botnets and Detection
12:00 - Is Auditing C/C++ Different Nowadays?
12:00 - Raising Hacker Kids: For Good or for Awesome
12:00 - Burning the Enterprise with BYOD
12:00 - Love letters to Frank Abagnale (How do I pwn thee let me count the ways)
12:00 - Put Me In Coach: How We Got Started In Infosec
13:00 - Getting the goods with smbexec
13:00 - Alice Goes Deeper (Down the Rabbit Hole) – Redirection 2.0
13:00 - The Message and The Messenger
13:00 - Grim Trigger
13:00 - Getting Schooled: Security with no budget in a hostile environment.
13:00 - The Malware Management Framework, a process you can use to find advanced malware. We found WinNTI with it!
14:00 - A n00bie’s perspective on Pentesting…
14:00 - Emergent Vulnerabilities: What ant colonies, schools of fish, and security have in common.
14:00 - 50 Shades of RED: Stories from the “Playroom”
14:00 - Shattering the Glass: Crafting Post Exploitation Tools with PowerShell
14:00 - Browser Pivoting (FU2FA)
14:00 - Hack the Hustle!
14:30 - My Security is a Graph – Your Arguement is Invalid
15:00 - Follow the Foolish Zebras: Finding Threats in Your Logs
15:00 - Why Your IT Bytes
15:00 - Beyond Information Warfare “You Ain’t Seen Nothing Yet”
15:00 - Operationalizing Security Intelligence in the Enterprise
15:00 - Cheat Codez: Level UP Your SE Game
15:00 - Taking the BDSM out of PCI-DSS Through Open-Source Solutions
15:30 - Security Training and Research Cloud (STRC)
16:00 - Using Facial Recognition Software In Digital Forensics And Information Security
16:00 - Hacking Back, Active Defense and Internet Tough Guys
16:00 - New Shiny in the Metasploit Framework
16:00 - Passive Aggressive Defense
16:00 - Stop Fighting Anti-Virus
16:30 - So you want to be a pentester?
17:00 - Everything you ever wanted to know on how to start a Credit Union, but were afraid to ask.
17:00 - An Encyclpwnia of Persistence
17:00 - The Art and Science of Hacking Any Organization
17:00 - Digital Energy – BPT
17:00 - How to Fight a War Without Actually Starting One
17:30 - An Anti-Forensics Primer
18:00 - A developer’s guide to pentesting
18:00 - Your Turn!
18:00 - Living Off the Land: A Minimalist’s Guide to Windows Post-Exploitation
18:00 - Crypto-Exploit Exercises: A tool for reinforcing basic topics in Cryptography
18:00 - What if Petraeus was a hacker? Email privacy for the rest of us
18:30 - First line of defense

Sunday, Sept. 29, 2013

08:00 - Cracking Corporate Passwords – Exploiting Password Policy Weaknesses
08:00 - Steal All of the Databases.
08:00 - How the Grid Will Be Hacked
08:00 - Practical File Format Fuzzing
09:00 - Ownage From Userland: Process Puppeteering
09:00 - After SS7 its LTE
09:00 - help for the helpdesk
09:00 - Surviving the Dead
11:00 - Sandboxes from a pen tester’s view
11:00 - How can I do that? Intro to hardware hacking with an RFID badge reader
11:00 - Weaponizing your Coffee Pot
11:00 - ‘) UNION SELECT `This_Talk` AS (‘New Exploitation and Obfuscation Techniques’)%00
12:00 - A SysCall to ARMs
12:00 - Practical OSINT
12:00 - Exploiting_the_Zeroth_Hour(); Developing your Advanced Persistent Threat to Pwn the Network
12:00 - iOS.reverse #=> iPwn Apps
13:00 - Stop making excuses; it’s time to own your HIV (High Impact Vulnerabilities)
13:00 - Phishing Like The Pros
13:00 - Terminal Cornucopia
13:00 - The Netsniff-NG Toolkit
14:00 - Why Dumpster Dive when I can pwn right in?
14:00 - Wait; How is All This Stuff Free?!?
14:00 - Raspberry Pi, Media Centers, and AppleTV
14:00 - Uncloaking IP Addresses on IRC

Unknown date

Presenters