Derbycon 8

123 talks · 2010 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Track 2 19 Bypassing Port Security In 2018 Defeating MacSEC and 8021x 2010 Gabriel Ryan 2010
• Derbycon 8 Closing Ceremonies
• Derbycon 8 Opening Ceremony
• Derbycon 8 video rig use
• Keynote 00 How to influence security technology in kiwi underpants Benjamin Delpy
• Keynote 01 Panel Discussion At a Glance Information Security Ed Skoudis John Strand Lesley Carhart M
• Stable 00 Red Teaming gaps and musings Samuel Sayen
• Stable 01 A Process is No One Hunting for Token Manipulation Jared Atkinson Robby Winchester
• Stable 02 Fuzz your smartphone from 4G base station side Tso Jen Liu
• Stable 03 Clippy for the Dark Web Looks Like Youre Trying to Buy Some Dank Kush Can I Help You With
• Stable 04 Synfuzz Building a Grammar Based Re targetable Test Generation Framework Joe Rozner
• Stable 05 Escoteric Hashcat Attacks Evilmog
• Stable 07 RFID Luggage Tags IATA vs Real Life Daniel Lagos
• Stable 08 LOL They Placed Their DMZ in the Cloud Easy Pwnage or Disruptive Protection Carl Alexander
• Stable 09 Maintaining post exploitation opsec in a world with EDR Michael Roberts Martin Roberts
• Stable 10 Hey I found a vulnerability now what Lisa Bradley CRob
• Stable 11 Foxtrot C2 A Journey of Payload Delivery Dimitry Snezhkov
• Stable 12 Ridesharks Kaleb Brown
• Stable 13 Tales From the Bug Mine Highlights from the Android VRP Brian Claire Young
• Stable 14 Decision Analysis Applications in Threat Analysis Frameworks Emily Shawgo
• Stable 15 Threat Intel On The Fly Tazz
• Stable 16 Make Me Your Dark Web Personal Shopper Emma Zaballos
• Stable 17 Driving Away Social Anxiety Joey Maresca
• Stable 18 Off grid coms and power Justin Herman
• Stable 19 CTFs Leveling Up Through Competition Alex Flores
• Stable 21 Extending Burp to Find Struts and XXE Vulnerabilities Chris Elgee
• Stable 22 Introduction to x86 Assembly DazzleCatDuo
• Stable 23 Pacu Attack and Post Exploitation in AWS Spencer Gietzen
• Stable 24 An Inconvenient Truth Evading the Ransomware Protection in Windows 10 Soya Aoyama
• Stable 25 Brutal Blogging Go for the Jugular Kate Brew
• Stable 26 RID Hijacking Maintaining Access on Windows Machines Sebastin Castro
• Stable 27 Your Training Data is Bad and You Should Feel Bad Ryan J OGrady
• Stable 28 So many pentesting tools from a 4 Arduino Kevin Bong Michael Vieau
• Stable 29 Patching Show me where it hurts Cheryl Biswas
• Stable 30 Advanced Deception Technology Through Behavioral Biometrics Curt Barnard Dawud Gordon
• Stable 31 We are all on the spectrum What my 10 year old taught me about leading teams Carla A Raisl
• Stable 32 No Place Like Home Real Estate OSINT and OPSec Fails John Bullinger
• Stable 33 The Layer2 Nightmare Chris Mallz
• Stable 34 Attacking Azure Environments with PowerShell Karl Fosaaen
• Stable 35 Blue Blood Injection Transitioning Red to Purple Lsly Ayyy
• Stable 36 Mirai Satori OMG and Owari IoT Botnets Oh My Peter Arzamendi
• Stable 37 Comparing apples to Apple Adam Mathis
• Stable 38 How online dating made me better at threat modeling Isaiah Sarju
• Stable 39 Threat Hunting with a Raspberry Pi Jamie Murdock
• Stable 40 MA Defense and Integration All that Glitters is not Gold Sara Leal Jason Morrow
• Track 1 00 IRS HR Microsoft and your Grandma What they all have in common Christopher Hadnagy Cat Mu
• Track 1 01 LOLBins Nothing to LOL about Oddvar Moe
• Track 1 02 Everything Else I Learned About Security I Learned From Hip Hop Paul Asadoorian
• Track 1 03 Hackers Hugs Drugs Mental Health in Infosec Amanda Berlin
• Track 1 04 Android App Penetration Testing 101 Joff Thyer Derek Banks
• Track 1 05 Draw a Bigger Circle InfoSec Evolves Cheryl Biswas
• Track 1 06 Building an Empire with IronPython Jim Shaver
• Track 1 07 SAEDY Subversion and Espionage Directed Against You Judy Towers
• Track 1 09 How to test Network Investigative TechniquesNITs used by the FBI Dr Matthew Miller
• Track 1 10 Cloud Computing Therapy Session Cara Marie Andy Cooper
• Track 1 11 Silent Compromise Social Engineering Fortune 500 Businesses Joe Gray
• Track 1 12 Dexter the friendly forensics expert on the Coinbase security team Hayden Parker
• Track 1 13 Going on a Printer Safari Hunting Zebra Printers James Edge
• Track 1 14 Social Engineering At Work How to use positive influence to gain management buy in for an
• Track 1 15 Ham Radio 4 Hackers Eric Watkins Devin Noel
• Track 1 16 Getting Control of Your Vendors Before They Take You Down Dan Browder
• Track 1 17 Cyber Intelligence There Are No Rules and No Certainties Coleman Kane
• Track 1 18 Getting Started in CCDC Russell Nielsen
• Track 1 19 Changing Our Mindset From Technical To Psychological Defenses Andrew Kalat
• Track 2 00 I Can Be Apple and So Can You Josh Pitts
• Track 2 01 From Workstation to Domain Admin Why Secure Administration Isnt Secure and How to Fix It
• Track 2 02 MS17 010 zerosum0x0
• Track 2 03 The Unintended Risks of Trusting Active Directory Lee Christensen Will Schroeder Matt Nel
• Track 2 04 Lessons Learned by the WordPress Security Team Aaron D Campbell
• Track 2 05 IronPython omfg Marcello Salvati
• Track 2 06 Hardware Slashing Smashing and Reconstructing for Root access Deral Heiland
• Track 2 07 App o Lockalypse now Oddvar Moe
• Track 2 08 Web App 101 Getting the lay of the land Mike Saunders
• Track 2 09 Invoke DOSfuscation Techniques FOR F IN style DO S level CMD Obfuscation Daniel Bohannon
• Track 2 10 WE ARE THE ARTILLERY Using Google Fu To Take Down The Grids Chris Sistrunk Krypt3ia SynAc
• Track 2 11 Just Let Yourself In David Boyd
• Track 2 13 Living in a Secure Container Down by the River Jack Mannino
• Track 2 14 Red Mirror Bringing Telemetry to Red Teaming Zach Grace
• Track 2 15 Two Factor Too Furious Evading and Protecting Evolving MFA Schemes Austin Baker Doug Bien
• Track 2 16 IoT Not Even Your Bed Is Safe Darby Mullen
• Track 2 17 Fingerprinting Encrypted Channels for Detection John Althouse
• Track 2 18 On the Nose Bypassing Huaweis Fingerprint authentication by exploiting the TrustZone Nick
• Track 3 00 Invoke EmpireHound Merging BloodHound Empire for Enhanced Red Team Workflow Walter Legows
• Track 3 01 When Macs Come Under ATTCK Richie Cyrus
• Track 3 02 Abusing IoT Medical Devices For Your Precious Health Records Saurabh Harit Nick Delewski
• Track 3 03 Detecting WMI exploitation Michael Gough
• Track 3 04 Gryffindor Pure JavaScript Covert Exploitation Matthew Toussain
• Track 3 05 Instant Response Making IR faster than you thought possible Mick Douglas Josh Johnson
• Track 3 06 VBA Stomping Advanced Malware Techniques Carrie Roberts Kirk Sayre Harold Ogden
• Track 3 07 Media hacks an Infosec guide to dealing with journalists Sean Gallagher Steve Ragan Paul
• Track 3 08 Deploying Deceptive Systems Luring Attackers from the Shadows Kevin Gennuso
• Track 3 09 The Money Laundering Cannon Real cash Real Criminals and Real Layoffs Arian Evans
• Track 3 10 Perfect Storm Taking the Helm of Kubernetes Ian Coldwater
• Track 3 11 How to put on a Con for Fun and Non Profit Benny Karnes John Moore Rick Hayes Matt Perry
• Track 3 12 Web app testing classroom in a box the good the bad and the ugly Lee Neely Chelle Clement
• Track 3 13 Metasploit Town Hall 0x4 Brent Cook Aaron Soto Adam Cammack Cody Pierce
• Track 3 14 Community Based Career Development or How to Get More than a T Shirt When Participating a
• Track 3 15 Goodbye Obfuscation Hello Invisi Shell Hiding Your Powershell Script in Plain Sight Omer
• Track 3 16 Cloud Forensics Putting The Bits Back Together Brandon Sherman
• Track 3 17 Killsuit The Equation Groups Swiss Army knife for persistence evasion and data exfil Fran
• Track 3 18 The MS Office Magic Show Stan Hegt Pieter Ceelen
• Track 3 19 Living off the land enterprise post exploitation Adam Reiser
• Track 3 20 Hillbilly Storytime Pentest Fails Adam Compton
• Track 4 00 The History of the Future of Cyber Education Winn Schwartau
• Track 4 01 State of Win32k Security Revisiting Insecure design Vishal Chauhan
• Track 4 02 Offensive Browser Extension Development Michael Weber
• Track 4 03 Protect Your Payloads Modern Keying Techniques Leo Loobeek
• Track 4 04 Jump Into IOT Hacking with the Damn Vulnerable Habit Helper Device Nancy Snoke Phoenix Sn
• Track 4 06 Disaster Strikes A Hackers Cook book Jose Quinones Carlos Perez
• Track 4 07 Ninja Looting Like a Pirate Infojanitor
• Track 4 08 Hacking Mobile Applications with Frida David Coursey
• Track 4 09 Victor or Victim Strategies for Avoiding an InfoSec Cold War Jason Lang Stuart McIntosh
• Track 4 10 Ubiquitous Shells Jon Gorenflo
• Track 4 11 99 Reasons Your Perimeter Is Leaking Evolution of CC John Askew
• Track 4 12 Ship Hacking a Primer for Todays Pirate Brian Satira Brian Olson
• Track 4 13 Code Execution with JDK Scripting Tools Nashorn Javascript Engine Brett Hawkins
• Track 4 14 PHONOPTICON leveraging low rent mobile ad services to achieve state actor level mass surv
• Track 4 15 Bug Hunting in RouterOS Jacob Baines
• Track 4 16 Breaking Into Your Building A Hackers Guide to Unauthorized Access Tim Roberts Brent Whit
• Track 4 17 The making of an iOS 11 jailbreak Kiddie to kernel hacker in 14 sleepless nights Bryce so
• Track 4 18 Who Watches the Watcher Detecting Hypervisor Introspection from Unprivileged Guests Tomas
• Track 4 19 Pwning in the Sandbox OSX Macro Exploitation Beyond Adam Gold Danny Chrastil
• Track 4 20 IOCs Today Intelligence Led Security Tomorrow Katie Kusjanovic Matthew Shelton