InfoconDB

DerbyCon 9.0 Finish Line took place Sept. 4, 2019 through Sept. 8, 2019 (4 years, 10 months ago) at Marriott Louisville in Louisville, Kentucky, USA.

Presentations

Friday, Sept. 6, 2019

09:00 - Opening Keynote - Presented by Ed Skoudis
10:00 - DerbyCon Story Time Panel
12:00 - Dynamic Risk Taking and Social Engineering
12:00 - Bypassing MacOS Detections With Swift
12:00 - Well, what have we here?A year of cyber deception, attribution and making attackers rethink their life choices.
12:00 - Metasploit Town Hall Finale
12:30 - IPv6 Security Considerations - For When "Just Turn It Off" Isn't Good Enough
13:00 - I PWN thee, I PWN thee not!
13:00 - BloodHound From Red to Blue
13:00 - Using Next Generation Fuzzing Tools: Fixing Bugs and Writing Memory Corruption Exploits
13:30 - SCADA: What the next Stuxnet will look like and how to prevent it
14:00 - Scientific computing for information security – forging the missing link
14:00 - “How do I detect technique X in Windows?” Applied Methodology to Definitively Answer this Question
14:00 - Designing & building a stealth C2 LDAP channel
14:00 - Azure Sentinel - A first look at Microsoft's SIEM Solution
14:30 - There's No Place like (DUAL)Homed.
15:00 - To CORS! The cause of, and solution to, your SPA problems!
15:00 - Defeating Next-Gen AV and EDR: Using Old (And New) Tricks on New Dogs
15:00 - Behavioral Security and Offensive Psychology at Scale
15:00 - Modlishka - Is a Mantis Eating 2FA's Lunch?
15:30 - Hacking Humans: Addressing Vulnerabilities in the Advancing Medical Device Landscape
16:00 - It Must Be Fancy Bear!
16:00 - Not A Security Boundary: Breaking Forest Trusts
16:00 - The Hackers Apprentice
16:00 - PowerShell Security: Looking Back from the Inside
16:30 - Getting the most out of your covert physical security assessment - A Client’s Guide
17:00 - Getting dirty on the CANBUS
17:00 - Cyber false flags and adversarial counterintelligence, oh my…
17:00 - Enabling The Future (Panel)
17:00 - How to Tell the C-Level Their Baby is Ugly
17:30 - Automated Dylib Hijacking
18:00 - Phishing past Mail Protection Controls using Azure Information Protection (AIP)

Saturday, Sept. 7, 2019

09:00 - 42: The answer to life, the universe, and everything offensive security
09:00 - The $19.95 anonymous cyber profile
09:00 - Catching Cyber Criminals – Investigative techniques to identify modern threat actors and the clues they leave behind during data breaches
09:00 - Collect All the Data - Protect All the Things
09:30 - Prepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty
10:00 - Lying in Wait: Discovering and Exploiting Weaknesses in Automated Discovery Actions
10:00 - kubered - Recipes for C2 Operations on Kubernetes
10:00 - COM Hijacking Techniques
10:00 - Build your own multi-user password manager using open source software
10:30 - No class, Low Tech, High damage
12:00 - Testing Endpoint Protection: How Anyone Can Bypass Next Gen AV
12:00 - Inter-chip communication - Testing end-to-end security on IoT
12:00 - Early Detection Through Deception
12:00 - Assumed Breach: A Better Model for Penetration Testing
12:30 - The quest for 10g IDS
13:00 - StringSifter: Learning to Rank Strings Output for Speedier Malware Analysis
13:00 - REST in Peace: Abusing GraphQL to Attack Underlying Infrastructure
13:00 - Adventures in Azure Privilege Escalation
13:00 - Swagger Defense
13:30 - Kerberoasting Revisited
14:00 - Breaking & Entering via SDR, or How I defeated Wiegend over UHF/VHF, or your apartment isn't safe...
14:00 - The “Art” of The BEC - What Three Years of Fighting Has Taught Us
14:00 - Practical Heuristic Exploitation
14:00 - Hacking While Blind.
14:30 - Choose Your Own TTX: Redefining the Incident Response Table Top Exercise
15:00 - Assessing IoT Surveillance - Arlo
15:00 - Full Steam Ahead: Serverless Hacking 101
15:00 - Hunting Phish Kits
15:00 - BloodHound: Head to Tail
15:30 - One woman's journey to CISO leveraging Social Engineering
16:00 - Five Mistakes We Wish Users Would Stop Making
16:00 - Red Team Methodology: A Naked Look
16:00 - SharPersist: Windows Persistence Toolkit in C#
16:00 - Next-gen IoT botnets - leveraging cloud implementations for shells on 500k IoTs
16:30 - Are you ready to leverage DevSecOps? Get ready and use it for good.
17:00 - API Keys, Now What?Taking the Pen Test Into the Amazon Cloud
17:00 - Attacking with Automation: How Office 365 automation provides another new risk to the cloud
17:00 - Shadow IT in the Cloud
17:30 - .NET Manifesto - Win Friends and Influence the Loader
18:00 - Confessions of an IT / OT Marriage Counselor

Sunday, Sept. 8, 2019

09:00 - Python Two birds with one stone
09:00 - Rise of the Machines // using machine learning with GRC
09:00 - Unix: the Other White Meat
09:30 - Invoke-GreatBirdOfCommonKnowledge - Gathering what is scattered with ATT&CK, an Atomic Bird, and a bit of homegrown PowerShell...
10:00 - How to Give the Gift That Keeps on Giving - Your Knowledge
10:00 - Adventures in systemd injection
10:00 - Red Team Level over 9000! Fusing the powah of .NET with a scripting language of your choosing: introducing BYOI (Bring Your own Interpreter) payloads.
10:00 - RFID sniffing, under your nose and in your face!
10:30 - Frag, You're It - Hacking Laser Tag
11:00 - Active Directory Security: Beyond the Easy Button
11:00 - Product Security Shouldn't be Painful
11:00 - Waking up the data engineer in you!
11:00 - The Backup Operators Guide to the Galaxy
11:30 - Old Tools, New Tricks: Hacking WebSockets
12:00 - Endpoint Detection Super Powers on the cheap, with Sysmon
12:00 - Incident response on macOS
12:00 - Hunting Webshells: Tracking TwoFace
12:00 - SS7 for INFOSEC
13:00 - Empathy as a Service to Create a Culture of Security
13:00 - Improving CACTUSTORCH payloads
13:00 - I sim(ulate), therefore i catch: enhancing detection engineering with adversary simulation
13:00 - Automating Hashtopolis
13:30 - Social Engineering in Non-Linear Warfare
14:00 - Adversarial Emulation
14:00 - How to cook a five star meal from the convenience of your hotel room
14:00 - Welcome to the Jumble: Improving RDP Tooling for Malware Analysis and Pentesting
14:30 - Virtual Smart Cards for Lab Environments

DerbyCon 9.0 Finish Line (2019)

Presentations

Presenters