44CON Talks & Presentations

44CON Information Security Conference

Intro to IoT Hacking

Learn essential techniques for IoT hacking, including firmware analysis and finding serial consoles. Gain insights into hardware vulnerabilities and start your journey in this exciting field of information security.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

From Zero To Hero - Threat Modeling In 90 Minutes

Learn essential threat modeling techniques to identify and mitigate security risks in your systems, enhancing your ability to protect against potential vulnerabilities.

• YouTube
• 1 hour 10 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

HeapLab Taster - GLIBC Heap Exploitation

Dive into GLIBC heap exploitation techniques with expert Max Kamper. Learn advanced memory corruption strategies and enhance your cybersecurity skills in this intensive session.

• YouTube
• 1 hour 9 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Attacking Development Pipelines for Actual Profit

Explore CI/CD pipeline vulnerabilities and real-world attacks. Learn methodologies for identifying and exploiting weaknesses in development infrastructure for enhanced security.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Owning the Cloud Through SSRF

Explore cloud security vulnerabilities through SSRF attacks, focusing on metadata exploitation, CVE examples, and advanced techniques like DNS rebinding for comprehensive cloud protection.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Cold War Cryptography

Explore Cold War-era encryption methods, ciphers, and cryptographic devices used by intelligence agencies, with insights into historical espionage techniques.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Scout Suite – A Multi-Cloud Security Auditing Tool

Explore Scout Suite, a multi-cloud security auditing tool, to enhance your cloud infrastructure's security posture and streamline compliance assessments across platforms.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Hot or Not, the Hacker Way

Exploring thermal imaging in information security: hacking a FLIR E4 for enhanced resolution and uncovering surprising heat signatures from computers.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Hunting Asynchronous Vulnerabilities

Explore techniques for uncovering hidden vulnerabilities in backend systems using exploit-induced callbacks. Learn to detect and exploit asynchronous issues across various technologies and platforms.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Forging the USB Armory

Explore the development of the USB armory, an open-source hardware device for security applications. Learn about its architecture, security features, and potential uses as a trusted USB device.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Introduction to Reverse Engineering C++

Learn techniques for reverse engineering C++ programs, including analyzing compiled code, understanding memory layouts, and identifying key structures. Gain practical skills for software analysis and security research.

• YouTube
• 2 hours 10 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Analyzing Malicious Office Documents

Learn techniques to analyze malicious Microsoft Office documents using Python tools like oledump and YARA rules. Hands-on exercises guide you through step-by-step analysis without requiring Office software.

• YouTube
• 2 hours 16 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Stegosploit - Drive by Browser Exploits Using Only Images

Innovative technique encoding browser exploits in images, combining steganography and polyglots for undetectable delivery. Explores implementation, challenges, and implications for cybersecurity.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Automated Extraction of Configuration and Payloads from Sophisticated Malware

Automated malware analysis system for extracting payloads, configurations, and indicators from sophisticated malware, reducing time and skill requirements for threat intelligence.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Software Defined Networking - SDN Security

Explore SDN security implications, attack surfaces, and vulnerabilities with live exploit demos. Learn about efforts to enhance SDN controller security and future developments.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk