DerbyCon 9

102 talks · 1995 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Stable 13 The 1995 anonymous cyber profile Patrick Matthews 1995
• 1 00 Opening Ceremony Derbycon Crew
• 1 01 Opening Keynote Ed Skoudis
• 1 02 DerbyCon Story Time Panel Dustin Heywood Evil Mog and others
• 1 03 Dynamic Risk Taking and Social Engineering Chris Hadnagy
• 1 04 Using Next Generation Fuzzing Tools Fixing Bugs and Writing Memory Corruption Exploits Dr Jared
• 1 05 How do I detect technique X in Windows Applied Methodology to Definitively Answer this Question
• 1 06 To CORS The cause of and solution to your SPA problems Tim lanmaster53 Tomes Kevin Cody
• 1 07 Not A Security Boundary Breaking Forest Trusts Will Schroeder Lee Christensen
• 1 08 Enabling The Future Panel Dave Kennedy Jess Walpole Scott Angelo Kevin Baker
• 1 09 42 The answer to life the universe and everything offensive security Will Pearce Nick Landers
• 1 10 kubered Recipes for C2 Operations on Kubernetes Larry Suto Jeff Holden
• 1 11 Testing Endpoint Protection How Anyone Can Bypass Next Gen AV Kevin Gennuso
• 1 12 Adventures in Azure Privilege Escalation Karl Fosaaen
• 1 13 Breaking Entering via SDR or How I defeated Wiegend over UHFVHF or your apartment isnt safe Tim
• 1 14 Assessing IoT Surveillance Arlo Jimi Sebree
• 1 15 Next gen IoT botnets leveraging cloud implementations for shells on 500k IoTs Alex Jay Balan
• 1 16 Attacking with Automation How Office 365 automation provides another new risk to the cloud Tren
• 1 17 Red Team Level over 9000 Fusing the powah of NET with a scripting language of your choosing int
• 1 18 Active Directory Security Beyond the Easy Button Sean Metcalf
• 1 19 Incident response on macOS Thomas Reed
• 1 21 Adversarial Emulation Bryson Bort
• 2 02 Scientific computing for information security forging the missing link Ryan Elkins
• 2 03 Defeating Next Gen AV and EDR Using Old And New Tricks on New Dogs Nick Lehman Graph X Steve Ei
• 2 04 The Hackers Apprentice Mark Baggett
• 2 05 How to Tell the C Level Their Baby is Ugly Heather Smith
• 2 06 Collect All the Data Protect All the Things Aaron Rosenmund
• 2 07 Lying in Wait Discovering and Exploiting Weaknesses in Automated Discovery Actions Timothy Wrig
• 2 08 Inter chip communication Testing end to end security on IoT Deral Heiland
• 2 09 REST in Peace Abusing GraphQL to Attack Underlying Infrastructure Matthew Szymanski
• 2 10 The Art of The BEC What Three Years of Fighting Has Taught Us Ronnie Tokazowski
• 2 11 BloodHound Head to Tail Andy Robbins Rohan Vazarkar
• 2 12 Red Team Methodology A Naked Look Jason Lang
• 2 13 API Keys Now WhatTaking the Pen Test Into the Amazon Cloud Jim Shaver
• 2 14 Rise of the Machines using machine learning with GRC Justin Leapline Rick Yocum
• 2 15 How to Give the Gift That Keeps on Giving Your Knowledge Jason Blanchard
• 2 16 The Backup Operators Guide to the Galaxy Dave Mayer
• 2 17 SS7 for INFOSEC Paul Coggin
• 2 18 Empathy as a Service to Create a Culture of Security Tracy Z Maleeff
• 2 19 Welcome to the Jumble Improving RDP Tooling for Malware Analysis and Pentesting milio Gonzalez
• 3 00 Well what have we hereA year of cyber deception attribution and making attackers rethink their
• 3 01 BloodHound From Red to Blue Mathieu Saulnier
• 3 02 Azure Sentinel A first look at Microsofts SIEM Solution Carl Hertz
• 3 03 Behavioral Security and Offensive Psychology at Scale Samantha Davison Josh Schwartz
• 3 04 PowerShell Security Looking Back from the Inside Lee Holmes
• 3 05 Cyber false flags and adversarial counterintelligence oh my Jacob Williams
• 3 07 COM Hijacking Techniques David Tulis
• 3 08 Assumed Breach A Better Model for Penetration Testing Mike Saunders
• 3 09 StringSifter Learning to Rank Strings Output for Speedier Malware Analysis Philip Tully Matthew
• 3 10 Practical Heuristic Exploitation Kelly Villanueva
• 3 11 Full Steam Ahead Serverless Hacking 101 Tal Melamed
• 3 12 Five Mistakes We Wish Users Would Stop Making Lesley Carhart Chelle Clements April C Wright Ama
• 3 13 Unix the Other White Meat Adam Compton David Boyd
• 3 14 RFID sniffing under your nose and in your face Rich Rumble
• 3 15 Product Security Shouldnt be Painful Wim Remes
• 3 16 Hunting Webshells Tracking TwoFace Josh Bryant Robert Falcone
• 3 17 Improving CACTUSTORCH payloads Ryan Linn
• Almost All Noise 2 00 Metasploit Town Hall Finale Brent Cook Pearce Barry Jeffrey Martin Matthew Kie
• Bad Audio 2 01 I PWN thee I PWN thee not Jayson E Street
• DerbyCon 9 0 Metasploit Town Hall Redubbed
• DerbyCon 9 Behind the scenes
• DerbyCon 9 Closing
• Stable 00 Bypassing MacOS Detections With Swift Cedric Owens
• Stable 01 IPv6 Security Considerations For When Just Turn It Off Isnt Good Enough Jason Lewis
• Stable 02 Last Minute Offensive Machine Learning James Bower
• Stable 03 SCADA What the next Stuxnet will look like and how to prevent it Joseph Bingham
• Stable 04 Designing building a stealth C2 LDAP channel Rindert Kramer
• Stable 05 Theres No Place like DUALHomed David E Young Jr
• Stable 06 Modlishka Is a Mantis Eating 2FAs Lunch Lance Peterman
• Stable 07 Hacking Humans Addressing Vulnerabilities in the Advancing Medical Device Landscape Gabrie
• Stable 08 It Must Be Fancy Bear Xena Olsen
• Stable 09 Getting the most out of your covert physical security assessment A Clients Guide Brent Whi
• Stable 10 Getting dirty on the CANBUS Justin Herman
• Stable 11 Automated Dylib Hijacking Jimi Sebree
• Stable 12 Phishing past Mail Protection Controls using Azure Information Protection AIP Oddvar Moe H
• Stable 14 Prepare to Be Boarded A Tale of Kubernetes Plunder and Cryptobooty James Condon
• Stable 15 Build your own multi user password manager using open source software Michael Vieau Kevin
• Stable 16 No class Low Tech High damage Tom Ruff
• Stable 17 Early Detection Through Deception Jason Nester
• Stable 18 The quest for 10g IDS Harold Tabellion
• Stable 19 Swagger Defense Mick Douglas Pete Petersen
• Stable 20 Kerberoasting Revisited Will Schroeder
• Stable 21 Hacking While Blind Joe B TheBlindHacker
• Stable 22 Choose Your Own TTX Redefining the Incident Response Table Top Exercise Jamison Budacki
• Stable 23 Hunting Phish Kits Josh Rickard
• Stable 24 One womans journey to CISO leveraging Social Engineering Kate Mullin
• Stable 25 SharPersist Windows Persistence Toolkit in C Brett Hawkins
• Stable 26 Are you ready to leverage DevSecOps Get ready and use it for good Nicole Schwartz aka Circ
• Stable 27 Shadow IT in the Cloud Marisa Dyer Jessica Hazelrigg
• Stable 28 NET Manifesto Win Friends and Influence the Loader Casey Smith
• Stable 29 Confessions of an IT OT Marriage Counselor Lesley Carhart
• Stable 30 Python Two birds with one stone Andy Cooper
• Stable 31 Invoke GreatBirdOfCommonKnowledge Gathering what is scattered with ATTCK an Atomic Bird an
• Stable 32 Adventures in systemd injection Stuart McMurray
• Stable 33 Frag Youre It Hacking Laser Tag Eric Escobar
• Stable 34 Waking up the data engineer in you Jared Atkinson
• Stable 35 Old Tools New Tricks Hacking WebSockets Michael Fowl Nick Defoe
• Stable 36 Endpoint Detection Super Powers on the cheap with Sysmon Olaf Hartong
• Stable 37 Automating Hashtopolis EvilMog
• Stable 38 Social Engineering in Non Linear Warfare Bill Gardner
• Stable 39 How to cook a five star meal from the convenience of your hotel room Micah K Brown
• Stable 40 Virtual Smart Cards for Lab Environments Eddie David