Source Zero

101 talks · 2000–2022 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Source Zero Con 2022: Advanced Database Testing 2022
• Source Zero Con 2022: Adversarial Testing of Smart Health Card Applications 2022
• Source Zero Con 2022: Build or Enhance Your Vulnerability Management Program 2022
• Source Zero Con 2022: Catch a Vish 2022
• Source Zero Con 2022: Certified Priv Esc as a Service 2022
• Source Zero Con 2022: Consulting Skills to Pay the Bills 2022
• Source Zero Con 2022: Day In the Life Pen Tester 2022
• Source Zero Con 2022: Drowning in APIs 2022
• Source Zero Con 2022: Hardware Hacking 101 2022
• Source Zero Con 2022: How Easy Is It to Break Into Your Building? 2022
• Source Zero Con 2022: Introduction to Vulnerability Management 2022
• Source Zero Con 2022: It Doesn’t Have to be STUXNET – Attacks on ICS Environments 2022
• Source Zero Con 2022: Leveling Up Your Tradecraft - How To Bolster Your Toolkit 2022
• Source Zero Con 2022: Leveraging Data Science and Machine Learning 2022
• Source Zero Con 2022: Live, Laugh, LoLBAS 2022
• Source Zero Con 2022: Magic Crypto Dust 2022
• Source Zero Con 2022: Military to Civilian - From Aim Higher to Aim Cyber 2022
• Source Zero Con 2022: Mitigating Risks Posed by Threats & Vulnerabilities 2022
• Source Zero Con 2022: Networking to get Your Next Role 2022
• Source Zero Con 2022: OSINT - Enhanced IP & Subdomain Enumeration 2022
• Source Zero Con 2022: PCI 4.0 Common Technical Challenges and Pitfalls 2022
• Source Zero Con 2022: Risk-based Vulnerability Management and Remediation 2022
• Source Zero Con 2022: Secure SDLC Assessments 2022
• Source Zero Con 2022: Securing Technology Medical Space 2022
• Source Zero Con 2022: Thinking in Shades of Red 2022
• Source Zero Con 2022: Uncovering the Unknown Unknowns Within Your Secure SDLC Program 2022
• Source Zero Con 2022: What Eastern Medicine Can Teach us About Application Security 2022
• Source Zero Con 2022: What Wildland Firefighting Can Teach us About Responding to Malware Attacks 2022
• Source Zero Con 2022: WORKSHOP - Android The Vulnerable App 2022
• Source Zero Con 2022: WORKSHOP – Exploit Development: Chaining Exploits for Maximum Gains 2022
• Source Zero Con: 2021 Blockchain Security Lessons Learned 2021
• Pre-Windows 2000 Backdoors and Bypasses 2000
• (Security) Culture Eats Strategy For Breakfast
• AI for Red Teamers (what it looks like when the matrix actually comes for you)
• Assessing iOS Applications
• Automating Offensive Security Infrastructure
• Breaking Into The Cloud
• Business Email Compromise (BEC) & Phishing Investigations in Office365
• Current State of Linux Rootkits
• Cyber Insurance - Panacea or a House of Cards?
• Cyber Insurance: Why It's an Asset NOT a Liability in a Cyber Event
• Deliberate Engagements – Using USAF Ops Battle Rhythm for Pen Testing
• Developers Gone Wild
• Do You Know What Your API is Doing?
• Don't [You] Forget About [Me]... (or Forgotten Components of a Vulnerability Management Program)
• Filter Evasion (Workshop)
• Gaining a Foothold: Penetration Testing as a Second Career
• Ghost in the Machine: Adversarial AI Attacks
• Hacking a Bird
• How to Use AI for Decision Making for Vulnerability Remediation Planning
• Is Your SBOM a Dud or Da Bomb
• LOLBins - The Quieter Way
• Managing Perspectives for Assessment Reports with Few or Zero Findings
• Microsoft Defender ATP Telemetry: Workbook Visualizations
• One Piece at a Time: A Guide to Building a CTI Program
• Opening Keynote
• Optiv Vulnerability Management Maturity Model
• Ransomware: An Epidemic for the Digital Age
• Securing Your AWS Cloud: Best Practices and Pentesting Techniques
• Security Risks with Low-Code and No-Code Application Development Platforms
• Software Composition Analysis: Tools and Techniques
• Source Zero Con: Accelerating Vulnerability Remediation With Automation
• Source Zero Con: An Introduction to Burp Suite
• Source Zero Con: Analyzing Phishing Documents 101 with HTB
• Source Zero Con: Closing Keynote - No More Breaches: Protecting Your Cloud Infrastructure
• Source Zero Con: Cloud Pen Test 101
• Source Zero Con: Creating a Shared Reality: Ad-Hoc Intel Collection and Sharing for Emerging Threats
• Source Zero Con: Deep Dive Into Android Static Analysis and Exploitation
• Source Zero Con: Digital Dumpster Diving
• Source Zero Con: Empower your Developers to Scale AppSec in the Cloud Era
• Source Zero Con: Exposing the Ransomware Ecosystem
• Source Zero Con: Get Off My wLan - Hacking Wireless Networks
• Source Zero Con: GraphQL Vulnerabilities
• Source Zero Con: Is Your Application Sending Email as Securely as Possible?
• Source Zero Con: Legacy Attack Surface in the Modern Enterprise
• Source Zero Con: Leveling Up Your Phishing Game On Modern Platforms
• Source Zero Con: Mobile Device Management (MDM): The Blind Spot You Didn't Know About
• Source Zero Con: Open-Source Forensic Threat Hunting
• Source Zero Con: Opening Keynote
• Source Zero Con: OSINT - Enhanced Discovery and Profiling
• Source Zero Con: Phone Pre-Texting - Mastering Social Engineering Savoir-Faire
• Source Zero Con: Practical Password Cracking
• Source Zero Con: Purple Inside Out
• Source Zero Con: Remaining Invisible in the Age of EDR
• Source Zero Con: Rethink Remediation - Linear Vs. Lifecycle
• Source Zero Con: Reversing Automotive 8051
• Source Zero Con: ScareCrow Detection
• Source Zero Con: Security of the Internet of Things (IoT)
• Source Zero Con: The Covid Conundrum - Cloud Security Impact and Opportunity
• Source Zero Con: The Evolution of Cloud Forensics and Incident Response
• Source Zero Con: The Perils of SaaS Collaboration
• Source Zero Con: The Truth is Out There: Mission Critical SAP Applications are Under Attack
• Source Zero Con: Would Your Organization Fail the Active Directory Security Assessment?
• Source Zero: Fully Automated Endpoint Evaluations Part Three
• Source Zero: Fully Automated Endpoint Evaluations Part Two
• Source Zero: Fully Automated Endpoint Evaluations, Part 1 - Building Microsoft Custom Connectors
• The "I" in CTI: "Intelligence" or Just "Information"? Re-applying Risk Back Into Intelligence
• The Nooks and Crannies of AppSec
• This Talk Is About Incident Response Processes
• Vertical Risk Reports and You: Practical Applications of Cyber Threat Intelligence
• Visual Lock Picking Workstation