BruCON Security Conference
150 talks · 2011–2015 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- BruCON Promotional Video 2015 2015
- BruCON 0x03 - Keynote - Black Ops of TCP/IP 2011 - Dan Kaminsky 2011
- "Cyberwar" : Not What We Were Expecting
- 01 - BruCON 0x0A - BruCON Retro Opening
- 01 - BruCON 0x0B - BruCON Opening
- 01 - BruCON 0x0F - BruCON Opening
- 01 - BruCON 0x10 - BruCON Opening
- 01 - BruCON 0x11 - BruCON Opening
- 02 - BruCON 0x0A - Advanced WiFi Attacks using Commodity Hardware - Mathy Vanhoef
- 02 - BruCON 0x0B - Why isn't infosec working? Did you turn it off and back on again? - Rob Fuller
- 02 - BruCON 0x0D - Hacktivism during a global pandemic - Marc Rogers
- 02 - BruCON 0x0F - Keynote: The Mobile Malware Maze - Axelle Apvrille
- 02 - BruCON 0x10 - Keynote: Unite to Stop Evil! - Michael Sikorski
- 02 - BruCON 0x11 - Keynote: Secure with AI or Despite AI - Sebastien Deleersnyder
- 03 - BruCON 0x0A - Hacking driverless vehicles - ZoZ
- 03 - BruCON 0x0B - Security transition from 4G to 5G are we secure enough? - Altaf Shaik and Ravisha
- 03 - BruCON 0x0D - Automating Binary Analysis with Ghidra's P-Code - Gergely Revay
- 03 - BruCON 0x0F - Reverse engineering an EV charger - Andreas Claesson & Harrison Sand
- 03 - BruCON 0x10 - CurveBack: A Backdoor Analysis - Rafael Lukas Maers and
- 03 - BruCON 0x11 - Epochalypse Now The Coming Collapse of Time Integrity Trey Darley Pedro Umbelino
- 04 - BruCON 0x0A - (Re)Investigating Powershell attacks - Matt Hastings and Ryan Kazanciyan
- 04 - BruCON 0x0B - A hackers view to the upcoming ISO SAE 21434 - Martin Schmiedecker
- 04 - BruCON 0x0D - eCos Offensive Security Research Logbook - Quentin Kaiser
- 04 - BruCON 0x0F - Attack Surface and Security Implications of eSIM Technology - Markus Vervier
- 04 - BruCON 0x10 - Inside the biggest hacks and facts of the past year - Dieter Van Den Bosch
- 04 - BruCON 0x11 - Tinker Tailor LLM Spy: Investigate & Respond to Attacks on GenAI Chatbots
- 05 - BruCON 0x0A - Levelling Up Security @ Riot Games - Mark Hillick
- 05 - BruCON 0x0B - Cloud SIEM: What happened and what’s next? - Gunter Ollmann
- 05 - BruCON 0x0D - PIC Your Malware! - Ben Heimerdinger and Sebastian Feldmann
- 05 - BruCON 0x0F - OSDP auditing for red teamers and facility managers - Knud Hojgaard
- 05 - BruCON 0x10 - Bypassing firewalls with API-to-API Hacking - Johan Caluwé
- 05 - BruCON 0x11 - Sthenos: Building Your Own Cross-Architecture Embedded Hacking Arsenal - Felix E.
- 06 - BruCON 0x0B - Human side-channels and their implications for security and privacy
- 06 - BruCON 0x0A - Social engineering for penetration testers - Sharon Conheady
- 06 - BruCON 0x0D - Visibility beyond perimeters: Detecting C2 at time of execution - Nate Warfield
- 06 - BruCON 0x10 - A Typhoon in a Teacup? Evaluating Reporting on High Profile Threats - Joe Slowik
- 06 - BruCON 0x11 - Stealth in Plain Sight: Turning Native Messaging into a Covert C2 Channel
- 07 - BruCON 0x0B - Catching WMI lateral movement in an enterprise network - Jaco Blokker
- 07 - BruCON 0x0A - The 99c heart surgeon dilemma - Stefan Friedli
- 07 - BruCON 0x0D - The risk of CI/CD pipeline poisoning via CodeBuild - Asier Rivera
- 07 - BruCON 0x0F - Inside the biggest hacks and facts of the past year - Dieter Van Den Bosch
- 07 - BruCON 0x10 - A Texas handbook to Linux EDR baseline configurations - Melina Phillips
- 07 - BruCON 0x11 - Web-based Password Managers Under Attack – A Bitwarden Case Study - Julien Bedel
- 08 - BruCON 0x0B - Automated adversary emulation using Caldera - Erik Van Buggenhout
- 08 - BruCON 0x0A - Nerdland podcast recording - Lieven Scheire
- 08 - BruCON 0x0D - How to make Belgium one of the least cyber vulnerable countries? - Phédra Clouner
- 08 - BruCON 0x0F - Keynote: Robot vs Robot - Mikko Hypponen
- 08 - BruCON 0x10 - Keynote: I don't need privacy, I got confidentiality! - Kim Wuyts
- 08 - BruCON 0x11 - Keynote - When Do We Get to Play On Easy Mode - Wendy Nather
- 09 - BruCON 0x0F - Breaking & Disrupting WPA2/3 Networks by Abusing Sleep Mode - Mathy Vanhoef
- 09 - BruCON 0x0A - BruCON Opening
- 09 - BruCON 0x0B - It takes a village.. - Kimber Dowsett
- 09 - BruCON 0x0D - A Critical Assessment of Supply Chain Intrusion Vectors - Joe Slowik
- 09 - BruCON 0x10 - MitM but for Mail (MaitM) - Felipe Molina and Szymon Ziolkowski
- 09 - BruCON 0x11 - Deep-dive to Entra ID Token Theft Protection - Nestori Syynimaa
- 10 - BruCON 0x0A - When Lemon Markets, Imposter Syndrome & Dunning–Kruger collide - Haroon Meer
- 10 - BruCON 0x0B - Defeating Bluetooth Low Energy 5 PRNG for fun and jamming - Damien Cauquil
- 10 - BruCON 0x0D - Chasing the White Whale of Malware - Kapellmann & D.Nandedkar
- 10 - BruCON 0x0F - Critical Evaluation and Historical Context of the Vulkan Leaks - Joe Slowik
- 10 - BruCON 0x10 - Insert coin: Hacking arcades for fun - Ignacio Navarro
- 10 - BruCON 0x11 - Our Time in a Product Review Cabal: & the malware and backdoors that came with it
- 11 - BruCON 0x0A - Finding 0days in embedded systems with code coverage guided fuzzing
- 11 - BruCON 0x0B - Weaknesses in WPA3's Dragonfly Handshake - Mathy Vanhoef
- 11 - BruCON 0x0D - Android malware targeting Belgian Financial apps - Jeroen Beckers
- 11 - BruCON 0x0F - Improving Cyber Resilience - Christian Schneider & kevin Ott
- 11 - BruCON 0x10 - Forensic Flows, but make them better - Jessica Wilson
- 11 - BruCON 0x11 - #I'm in your logs now, deceiving your analysts and blinding your EDR Olaf Hartong
- 12 - BruCON 0x0A - $SignaturesAreDead = “Long Live RESILIENT Signatures” wide ascii nocase
- 12 - BruCON 0x0B - Incident response in the cloud/ foggy with a ray of sunshine - Jeroen Vandeleur
- 12 - BruCON 0x0D - Defeating EDRs using Dynamic Invocation in C# - Jean Francois Maes
- 12 - BruCON 0x0F - Firmware vulnerabilities in critical infrastructure - Nate Warfield
- 12 - BruCON 0x10 - A Year in Review: Lessons Learnt from Red Teaming Gen AI - Peter Bryan
- 12 - BruCON 0x11 - When the Model Takes Control: The Hidden Risks of AI Autonomy Through MCP
- 13 - BruCON 0x0A - All Your Cloud Are Belong To Us – Hunting Compromise in Azure - Nate Warfield
- 13 - BruCON 0x0B - Atomic Threat Coverage: being Threat Centric - Daniil Yugoslavskiy and Mateusz Wy
- 13 - BruCON 0x0D - BruCON Closing
- 13 - BruCON 0x0F - CommandGPT – Using ChatGPT for C2 and Post-Exploitation - Jonas Bauters
- 13 - BruCON 0x10 - Closing
- 13 - BruCON 0x11 - BruCON Closing
- 14 - BruCON 0x0A - Forging Trusts for Deception in Active Directory - Nikhil Mittal
- 14 - BruCON 0x0B - Internet Scale analysis of AWS Cognito Security - Andres Riancho
- 15 - BruCON 0x0A - Disrupting the Kill Chain - Vineet Bhatia
- 15 - BruCON 0x0B - Tales from professional thieves - Dan McInerney and Justin Wynn
- 16 - BruCON 0x0A - Hunting Android Malware: A novel runtime technique for identifying applications
- 16 - BruCON 0x0B - BruCON Closing
- 17 - BruCON 0x0A - Keynote - 5 256e+6 minutes in a decade - Daniel Cuthbert
- 18 - BruCON 0x0A - Exploits in Wetware - Robert Sell
- 19 - BruCON 0x0A - Outside the Box Breakouts and Privilege Escalation in Container Environments-Rob
- 20 - BruCON 0x0A - Dissecting Of Non Malicious Artifacts: One IP At A Time - Dani Goland & Ido Naor
- 21- BruCON 0x0A - IoT RCE, a Study With Disney - Lilith Wyatt
- 22 - BruCON 0x0A - Using blue team techniques in red team ops - Mark Bergman & Marc Smeets
- 23 - BruCON 0x0A - Process Control through Counterfeit Comms - Jared Rittle
- BruCON 0x04 - int0x80 (or Dual Core) - Moar Anti-Forensics for the Louise
- BruCON 0x05 - Aloria - .NET: The Framework, the Myth, the Legend
- BruCON 0x05 - Amelia Andersdotter's keynote
- BruCON 0x05 - Dan Guido's Keynote
- BruCON 0x05 - David Mortman's Keynote
- BruCON 0x05 - David Perez, Jose Pico - Geolocation of GSM mobile devices
- BruCON 0x05 - Devops Panel
- BruCON 0x05 - Devops Panel (part 2)
- BruCON 0x05 - Erin Jacobs, Zack Fasel - Taking the BDSM out of PCI-DSS through open-source solutions
- BruCON 0x05 - Facebook CTF
- BruCON 0x05 - Jake Valletta - CobraDroid
- BruCON 0x05 - Lightning Talks Session #1
- BruCON 0x05 - Robert Graham - Data-plane networking
- BruCON 0x05 - Russ Gideon - Paint by Numbers vs. Monet
- BruCON 0x05 - TB. Henriques, T. Martins, J. Gouveia - Realtime analysis and visualization of ...
- BruCON 0x05 - Vaagn Toukharian - HTTP Time Bandit
- BruCON 0x06 - Biting into the forbidden fruit - Krzysztof Kotowicz
- BruCON 0x06 - Cyber necromancy - resurrecting the dead - Matthew Halchyshak Joseph Tartaro
- BruCON 0x06 - Data transforming your sewage into signatures - Adam Schoeman
- BruCON 0x06 - Hacking driverless vehicles - Zoz
- BruCON 0x06 - Investigating Powershell attacks - Matt Hastings & Ryan Kazanciyan
- BruCON 0x06 - Keynote - Adam Shostack
- BruCON 0x06 - Keynote - Jennifer Minella
- BruCON 0x06 - Lightning Talks - 404 @JQuePublic
- BruCON 0x06 - Lightning Talks - Gavin Millard
- BruCON 0x06 - Lightning Talks - Jan Kadijk
- BruCON 0x06 - Lightning Talks - Matt Erasmus
- BruCON 0x06 - Lightning Talks - Nikos Danopoulos
- BruCON 0x06 - Lightning Talks - tunnelshade
- BruCON 0x06 - Lightning Talks - Voting Stage
- BruCON 0x06 - One packer to rule them all - Arne Swinnen & Alaeddine Mesbahi
- BruCON 0x06 - Security model bedfellows - Noel Dunne & Paco Hope
- BruCON 0x06 - Stealing a mobile using wormholes - Markus Vervier
- BruCON 0x06 - The project of prototype this - Joe Grand & Zoz
- BruCON 0x06 - Thunderbolts and Lightning - Snare
- BruCON 0x06 - Using superpowers for hw reverse engineering - Joe Grand
- BruCON 0x12 - Intro
- BruCON 0x12 - Attacking LLM Inference with Special Token Injection - Armend Gashi and Robert Shala
- BruCON 0x12 - BruCON Closing
- BruCON 0x12 - Continuous Access Evasion: Evading Microsoft CAE - Nikhil Mittal
- BruCON 0x12 - From GitHub Issues to RCE - Mackenzie Jackson and Rein Daelman
- BruCON 0x12 - Kernel Code Execution under VBS/HVCI- Juan Sacco
- BruCON 0x12 - Keynote - The Importance of Knitting in an AI World - Maddie Stone
- BruCON 0x12 - Pwn the Hub, Own the Home: Breaking Home Assistant - Emanuele Barbeno and Yves Bieri
- BruCON 0x12 - Pwning bluetooth devices in unexpected ways- Damien Cauquil
- BruCON 0x12 - Signed, Sealed, Compromised: Weaponizing Enterprise Mail Infrastructure -Jonah Burgess
- BruCON 0x12 - Terminally Bad Credit - Connor Du Plooy
- BruCON 0x12 - This Message Was Sent by Microsoft: - Keanu Nys
- How I met your pointer (Hijacking client software for fuzz and profit)
- HTML5 - A Whole New Attack Vector
- Introducing the Smartphone Penetration Testing Framework
- Keynote by Katie Moussouris
- pMap, the silent killer
- Recent Advances in IPv6 Security
- Shotgun parsers in the cross-hairs
- Uncovering SAP vulnerabilities: dissecting and breaking the Diag protocol
- We have you by the gadgets
- Welcome