InfoconDB

DerbyCon 6.0 Recharge took place Sept. 21, 2016 through Sept. 25, 2016 (7 years, 7 months ago) at Hyatt Regency Hotel in Louisville, Kentucky, USA.

Presentations

Friday, Sept. 23, 2016

09:15 - Opening Ceremonies
10:00 - Vulnerability disclosure, cloudy clouds, and million dollar shopping trips. This industry sucks. And is awesome.
12:00 - Internet of Things, Voice Control, AI, and Office Automation: BUILDING YOUR VERY OWN J.A.R.V.I.S.
12:00 - Metasploit Townhall
12:00 - Data Obfuscation: How to hide data and payloads to make them “not exist” (in a mathematically optimal way)
12:00 - Thinking Purple
12:00 - Go with the Flow: Get Started with Flow Analysis Quickly and Cheaply
12:30 - Abusing RTF: Exploitation, Evasion and Exfiltration
13:00 - Writing malware while the blue team is staring at you
13:00 - Mind Reading for Fun and Profit using DISC
13:00 - Stagefright: An Android Exploitation Case Study
13:00 - Top 10 2015-2016 compromise patterns observed & how to use non-traditional Internet datasets to detect & avoid them
13:00 - Information Security Proposed Solutions Series - 1. Talent
13:30 - DNSSUX: Why DNSSEC Makes Us Weaker
14:00 - +1,000,000 -0: Cloning a Game Using Game Hacking and Terabytes of Data
14:00 - Rotten Potato - Privilege Escalation from Service Accounts to SYSTEM
14:00 - Hunting for Exploit Kits
14:00 - Macs Get Sick Too
14:00 - Nose Breathing 101: A Guide to Infosec Interviewing
14:30 - Android Patchwork: Convincing Apps to Do What You Want Them To
15:00 - DevOops Redux
15:00 - Next Gen Web Pen Testing: Handling modern applications in a penetration test
15:00 - To Catch a Penetration Tester: Top SIEM Use Cases
15:00 - A Year in the Empire
15:00 - Is that a penguin in my Windows?
15:30 - Real World Attacks VS Check-box Security
16:00 - ARRR Maties! A map to the legal hack-back
16:00 - .... and bad mistakes I’ve made a few.....
16:00 - Beyond The ‘Cript: Practical iOS Reverse Engineering
16:00 - PowerShell Secrets and Tactics
16:00 - No Easy Breach: Challenges and Lessons from an Epic Investigation
16:30 - Project MVP - Hacking and Protecting SharePoint
17:00 - Better Network Defense Through Threat Injection and Hunting
17:00 - Responder for Purple Teams
17:00 - CrackMapExec - Owning Active Directory by using Active Directory
17:00 - Adaptation of the Security Sub-Culture
17:00 - Hacking Lync (or, ‘The Weakest Lync’)
17:30 - Metaprogramming in Ruby and doing it wrong.
18:00 - Evolving your Office’s Security Culture
18:00 - AWShit. Pay-as-you-go Mobile Penetration Testing
18:00 - It’s Never So Bad That It Can’t Get Worse
18:00 - Outlook and Exchange for the Bad Guys
18:00 - Exploiting First Hop Protocols to Own the Network
18:30 - Confronting Obesity in Infosec
19:00 - BurpSmartBuster - A smart way to find hidden treasures
19:00 - From Commodity to Advanced (APT) malware, are automated malware analysis sandboxes as useful as your own basic manual analysis?
19:00 - Defeating The Latest Advances in Script Obfuscation
19:30 - Advanced Persistent Thirst (APT)

Saturday, Sept. 24, 2016

09:00 - Deploying PAWs as Part of a Strategy to Limit Credential Theft and Lateral Movement
09:00 - Business Developement: The best non-four letter dirty word in infosec.
09:00 - We’re a Shooting Gallery, Now What?
09:00 - Breaking Credit Card Tokenization Without Cryptanalysisk
09:00 - Tool Drop 2.0 - Free As In Pizzak
09:30 - Malicious Office Doc Analysis for EVERYONE!
10:00 - Living Off the Land 2: A Minimalist’s Guide to Windows Defense
10:00 - The Art of War, Attacking the Organization and Raising the Defense
10:00 - The 1337 Gods of Geek Mythology
10:00 - Point of Sale Voyuer- Threat Actor Attribution Through POS Honeypots
10:00 - Attacking EvilCorp: Anatomy of a Corporate Hack
10:30 - Open Source Intelligence- What I learned by being an OSINT creeper
12:00 - Anti-Forensics AF
12:00 - Finding Your Balance
12:00 - Phishing without Failure and Frustration
12:00 - Managed to Mangled: Exploitation of Enterprise Network Management Systems
12:00 - I don’t give one IoTA: Introducing the Internet of Things Attack Methodology.
12:30 - Hashcat State of the Union
13:00 - Establishing A Foothold With JavaScript
13:00 - Garbage in, garbage out: generating useful log data in complex environments
13:00 - New Shiny in Metasploit Framework
13:00 - Penetration Testing Trends
13:00 - Five year checkup: the state of insulin pump security
13:30 - Overcoming Imposter Syndrome (even if you’re totally faking it)
14:00 - Using Binary Ninja for Modern Malware Analysis
14:00 - Fuzzing basics...how to break software
14:00 - Security v. Ops: Bridging the Gap
14:00 - Introducing DeepBlueCLI, a PowerShell module for hunt teaming via Windows event logs
14:00 - Embrace the Bogeyman: Tactical Fear Mongering for Those Who Penetrate
14:30 - From Gaming to Hacking The Planet
15:00 - How to Social Engineer your way into your dream job!
15:00 - Attackers Hunt Sysadmins - It’s time to fight back
15:00 - Scripting Myself Out of a Job - Automating the Penetration Test with APT2
15:00 - Hacking for Homeschoolers: STEM projects for under $20
15:00 - SQL Server Hacking on Scale using PowerShell
15:30 - Dive into DSL: Digital Response Analysis with Elasticsearch
16:00 - Need More Sleep? REST Could Help
16:00 - Medical Devices: Pwnage and Honeypots Make STEHM Great Again
16:00 - Making Our Profession More Professional
16:00 - Python 3: It’s Time
16:00 - DNS in Enterprise IR: Collection, Analysis and Response
16:30 - How are tickets paid for?
17:00 - Reverse engineering all the malware...and why you should stop.
17:00 - Body Hacking 101 (or a Healthy Lifestyle for Security Pros)
17:00 - So You’ve Inherited a Security Department, Now What…
17:00 - Breaking Android Apps for Fun and Profit
17:00 - Security Automation in your Continuous Integration Pipeline
17:30 - “Cruise Ship Security OR Hacking the High Seas
18:00 - Web Security for Dummies
18:00 - Attacking ADFS Endpoints with PowerShell
18:00 - The 90’s called, they want their technology back
18:30 - I Love myBFF (Brute Force Framework)
19:00 - Nobody gets fired by choosing IBM... but maybe they should.
19:30 - Shackles, Shims, and Shivs - Understanding Bypass Techniques

Sunday, Sept. 25, 2016

10:00 - Abusing Linux Trust Relationships: Authentication Back Alleys and Forgotten Features
10:00 - Introducing PowerShell into your Arsenal with PS>Attack
10:00 - Recharging Penetration Testing to Maximize Value
10:00 - Poetically Opaque (or other John Updike Quotes)
10:00 - Hack Yourself: Building A Pentesting Lab
10:30 - Samsung Pay: Tokenized Numbers, Flaws and Issues
11:00 - Fire Away! Sinking the Next Gen Firewall
11:00 - Hardening AWS Environments and Automating Incident Response for AWS Compromises
11:00 - The Advanced Persistent Pentester (All Your Networks Are Belong 2 Us)
11:00 - Java RATS: Not even your Macs are safe
11:00 - Yara Rule QA: Can’t I Write Code to do This for Me?
12:00 - Hashview, a new tool aimed to improve your password cracking endeavors.
12:00 - Mobile Device Forensics
12:00 - Invoke-Obfuscation: PowerShell obFUsk8tion Techniques & How To (Try To) D””e`Tec`T ‘Th’+’em’
12:00 - PacketKO - Data Exfiltration Via Port Knocking
12:00 - Hardware Hacking the Easyware Way
12:30 - Ransomware: An overview
13:00 - The Beginner’s Guide to ICS: How to Never Sleep Soundly Again
13:00 - Static PIE: How and Why
13:00 - Finding a Weak Link: Attacking Windows OEM Kernel Drivers
13:00 - MariaDB: Lock it down like a chastity belt
13:00 - IoT Defenses - Software, Hardware, Wireless and Cloud
14:30 - Closing Ceremony

DerbyCon 6.0 Recharge (2016)

Presentations

Presenters