Security BSides San Francisco Courses

Securing the Distributed Workforce

Explore innovative security solutions for distributed workforces, addressing challenges in user protection, monitoring, and maintaining a secure environment in cloud-based and remote work settings.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Rise of the Vermilion - Cross-Platform Cobalt Strike Beacon Targeting Linux and Windows

Explore the first cross-platform Cobalt Strike re-implementation, Vermilion Strike, targeting both Linux and Windows in real-world attacks. Learn about this significant malware discovery.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s

Explore JavaScript obfuscation techniques and learn a method for detecting packers to identify obfuscated files, crucial for understanding modern security threats.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Red Teaming macOS Environments with Hermes the Swift Messenger

Explore the development of Hermes, a Swift implant for macOS red teaming, integrated with Mythic C2 framework. Learn about its capabilities and detection methods using Apple's ESF.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

WireGuard from the Ground Up

Comprehensive overview of WireGuard: its implementation, protocol, cryptography, and comparison with other VPN solutions. Learn when and how to use this efficient end-to-end encryption tool.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Keynote - We Need More Mediocre Security Engineers

Challenging elitism in cybersecurity, this talk advocates for inclusivity and rethinking entry barriers to address growing demand and burnout in the field.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Hacker TikTok - Community, Creativity, and Controversy

Panel discussion exploring security-focused TikTok creators' experiences in bringing hacking awareness, humor, and community to a new audience, highlighting successes and challenges in this emerging frontier.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

CISO Panel Discussion

Insightful discussion on building and scaling top security teams, exploring strategies for talent attraction, retention, and overcoming challenges in the cybersecurity industry.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Hook, Line and Sinker - Pillaging API Webhooks

Explore "Webhook Boomerang flaws" and learn how to exploit SSRF vulnerabilities in API webhooks, potentially compromising cloud credentials despite security measures.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Exposed Secrets - How Public Git Repositories and Docker Images Expose Millions of Secrets Like API Keys and Security Certificates Every Year

Uncover the alarming spread of exposed API keys and secrets in public repositories. Learn about research findings, causes, and implications for cybersecurity.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

The Power of Guardrails - How to Slash Your Risk of XSS in Half

Discover how secure code defaults can significantly reduce XSS vulnerabilities and elevate overall security. Learn strategies to implement effective guardrails and minimize recurring security risks.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Ooga Booga - Avoiding Reinvention of the Wheel - Useful Security Tools and Lessons to Know

Discover Marie Kondo-inspired techniques for managing security challenges efficiently. Learn about useful tools and lessons to avoid reinventing the wheel in under-resourced security teams.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Practical Threat Hunting With Machine Learning

Explore practical applications of machine learning in threat hunting and detection, featuring case studies of high-value detections from two years of research and implementation.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

An Unlikely Friendship - Why Security Engineers and Product Managers Should Be Working Together

Discover strategies for security engineers to collaborate with product managers, enhancing security features, accelerating team growth, and unlocking revenue from security-conscious customers.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Read the Fantastic Manual - Writing Security Docs People Will Actually Read

Strategies for creating effective security documentation that people will read and use. Covers identifying needs, iterative creation, and measuring success in technical writing.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk