InfoconDB

DerbyCon 9.0 Finish Line took place Sept. 4, 2019 through Sept. 8, 2019 (4 years, 7 months ago) at Marriott Louisville in Louisville, Kentucky, USA.

Presentations

Friday, Sept. 6, 2019

09:00 - Opening Keynote - Presented by Ed Skoudis
10:00 - DerbyCon Story Time Panel
12:00 - Dynamic Risk Taking and Social Engineering
12:00 - Bypassing MacOS Detections With Swift
12:00 - Well, what have we here?A year of cyber deception, attribution and making attackers rethink their life choices.
12:00 - Metasploit Town Hall Finale
12:30 - IPv6 Security Considerations - For When "Just Turn It Off" Isn't Good Enough
13:00 - I PWN thee, I PWN thee not!
13:00 - BloodHound From Red to Blue
13:00 - Using Next Generation Fuzzing Tools: Fixing Bugs and Writing Memory Corruption Exploits
13:30 - SCADA: What the next Stuxnet will look like and how to prevent it
14:00 - Scientific computing for information security – forging the missing link
14:00 - “How do I detect technique X in Windows?” Applied Methodology to Definitively Answer this Question
14:00 - Designing & building a stealth C2 LDAP channel
14:00 - Azure Sentinel - A first look at Microsoft's SIEM Solution
14:30 - There's No Place like (DUAL)Homed.
15:00 - To CORS! The cause of, and solution to, your SPA problems!
15:00 - Defeating Next-Gen AV and EDR: Using Old (And New) Tricks on New Dogs
15:00 - Behavioral Security and Offensive Psychology at Scale
15:00 - Modlishka - Is a Mantis Eating 2FA's Lunch?
15:30 - Hacking Humans: Addressing Vulnerabilities in the Advancing Medical Device Landscape
16:00 - It Must Be Fancy Bear!
16:00 - Not A Security Boundary: Breaking Forest Trusts
16:00 - The Hackers Apprentice
16:00 - PowerShell Security: Looking Back from the Inside
16:30 - Getting the most out of your covert physical security assessment - A Client’s Guide
17:00 - Getting dirty on the CANBUS
17:00 - Cyber false flags and adversarial counterintelligence, oh my…
17:00 - Enabling The Future (Panel)
17:00 - How to Tell the C-Level Their Baby is Ugly
17:30 - Automated Dylib Hijacking
18:00 - Phishing past Mail Protection Controls using Azure Information Protection (AIP)

Saturday, Sept. 7, 2019

09:00 - 42: The answer to life, the universe, and everything offensive security
09:00 - The $19.95 anonymous cyber profile
09:00 - Catching Cyber Criminals – Investigative techniques to identify modern threat actors and the clues they leave behind during data breaches
09:00 - Collect All the Data - Protect All the Things
09:30 - Prepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty
10:00 - Lying in Wait: Discovering and Exploiting Weaknesses in Automated Discovery Actions
10:00 - kubered - Recipes for C2 Operations on Kubernetes
10:00 - COM Hijacking Techniques
10:00 - Build your own multi-user password manager using open source software
10:30 - No class, Low Tech, High damage
12:00 - Testing Endpoint Protection: How Anyone Can Bypass Next Gen AV
12:00 - Inter-chip communication - Testing end-to-end security on IoT
12:00 - Early Detection Through Deception
12:00 - Assumed Breach: A Better Model for Penetration Testing
12:30 - The quest for 10g IDS
13:00 - StringSifter: Learning to Rank Strings Output for Speedier Malware Analysis
13:00 - REST in Peace: Abusing GraphQL to Attack Underlying Infrastructure
13:00 - Adventures in Azure Privilege Escalation
13:00 - Swagger Defense
13:30 - Kerberoasting Revisited
14:00 - Breaking & Entering via SDR, or How I defeated Wiegend over UHF/VHF, or your apartment isn't safe...
14:00 - The “Art” of The BEC - What Three Years of Fighting Has Taught Us
14:00 - Practical Heuristic Exploitation
14:00 - Hacking While Blind.
14:30 - Choose Your Own TTX: Redefining the Incident Response Table Top Exercise
15:00 - Assessing IoT Surveillance - Arlo
15:00 - Full Steam Ahead: Serverless Hacking 101
15:00 - Hunting Phish Kits
15:00 - BloodHound: Head to Tail
15:30 - One woman's journey to CISO leveraging Social Engineering
16:00 - Five Mistakes We Wish Users Would Stop Making
16:00 - Red Team Methodology: A Naked Look
16:00 - SharPersist: Windows Persistence Toolkit in C#
16:00 - Next-gen IoT botnets - leveraging cloud implementations for shells on 500k IoTs
16:30 - Are you ready to leverage DevSecOps? Get ready and use it for good.
17:00 - API Keys, Now What?Taking the Pen Test Into the Amazon Cloud
17:00 - Attacking with Automation: How Office 365 automation provides another new risk to the cloud
17:00 - Shadow IT in the Cloud
17:30 - .NET Manifesto - Win Friends and Influence the Loader
18:00 - Confessions of an IT / OT Marriage Counselor

Sunday, Sept. 8, 2019

09:00 - Python Two birds with one stone
09:00 - Rise of the Machines // using machine learning with GRC
09:00 - Unix: the Other White Meat
09:30 - Invoke-GreatBirdOfCommonKnowledge - Gathering what is scattered with ATT&CK, an Atomic Bird, and a bit of homegrown PowerShell...
10:00 - How to Give the Gift That Keeps on Giving - Your Knowledge
10:00 - Adventures in systemd injection
10:00 - Red Team Level over 9000! Fusing the powah of .NET with a scripting language of your choosing: introducing BYOI (Bring Your own Interpreter) payloads.
10:00 - RFID sniffing, under your nose and in your face!
10:30 - Frag, You're It - Hacking Laser Tag
11:00 - Active Directory Security: Beyond the Easy Button
11:00 - Product Security Shouldn't be Painful
11:00 - Waking up the data engineer in you!
11:00 - The Backup Operators Guide to the Galaxy
11:30 - Old Tools, New Tricks: Hacking WebSockets
12:00 - Endpoint Detection Super Powers on the cheap, with Sysmon
12:00 - Incident response on macOS
12:00 - Hunting Webshells: Tracking TwoFace
12:00 - SS7 for INFOSEC
13:00 - Empathy as a Service to Create a Culture of Security
13:00 - Improving CACTUSTORCH payloads
13:00 - I sim(ulate), therefore i catch: enhancing detection engineering with adversary simulation
13:00 - Automating Hashtopolis
13:30 - Social Engineering in Non-Linear Warfare
14:00 - Adversarial Emulation
14:00 - How to cook a five star meal from the convenience of your hotel room
14:00 - Welcome to the Jumble: Improving RDP Tooling for Malware Analysis and Pentesting
14:30 - Virtual Smart Cards for Lab Environments

DerbyCon 9.0 Finish Line (2019)

Presentations

Presenters