BruCON Talks & Presentations

BruCON Security Conference

BruCON 0x06 - Keynote

Insightful keynote address exploring cutting-edge cybersecurity trends, challenges, and strategies for modern digital landscapes, delivered by industry expert Jennifer Minella at BruCON.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Advanced WiFi Attacks using Commodity Hardware

Explore advanced WiFi attack techniques using everyday hardware, uncovering vulnerabilities and enhancing network security knowledge with expert insights.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Bypassing Microsoft Defender for Identity

Explore techniques to bypass Microsoft Defender for Identity, executing high-impact attacks across the kill chain while avoiding detection in on-premises Active Directory environments.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Automating Binary Analysis with Ghidra's P-Code

Explore automated binary analysis using Ghidra's P-Code, an intermediate language that enables architecture-independent scripting for reverse engineering and vulnerability research.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Tales from Professional Thieves

Professional thieves share insider techniques for bypassing physical security, including sneaking in, fake badges, and social engineering, along with entertaining stories from real-world engagements.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Using Blue Team Techniques in Red Team Ops

Innovative techniques for advanced red team operations, including infrastructure management, blue team detection, and dynamic adjustments to enhance effectiveness and evasion.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Signatures Are Dead - Long Live Resilient Signatures

Insights on creating resilient, high-fidelity threat detections that withstand evasion attempts, with practical examples from real-world attacks and methodologies for effective detection development.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

DYODE - Do Your Own Dyode

Explore DYODE, a low-cost DIY data diode for securing Industrial Control Systems. Learn about its development, components, and applications in file transfer, Modbus data, and remote debugging.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Hacking Invisibly and Silently with Light and Sound

Explore innovative hacking techniques using light and sound, from C2 channels and exfiltration to disrupting motion detectors and speech jamming. Learn advantages, disadvantages, and mitigation strategies for these unconventional attacks.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

What Does the Perfect Door or Padlock Look Like?

Explore physical security vulnerabilities in doors and padlocks, covering various components, attack methods, and protective measures for enhanced security awareness.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Building a Successful Internal Adversarial Simulation Team

Strategies for building and operating an effective internal adversarial simulation team, covering threat analysis, offensive techniques, and defensive metrics to enhance cybersecurity posture.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Uncovering SAP Vulnerabilities - Dissecting and Breaking the Diag Protocol

Dissecting SAP Diag protocol to uncover vulnerabilities, explore attack vectors, and enhance security in SAP Netweaver systems through novel tools and techniques for protocol analysis and exploitation.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Introducing the Smartphone Penetration Testing Framework

Comprehensive framework for assessing smartphone security in organizations, covering various attack vectors and providing tools for penetration testing across multiple platforms.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Defeating EDRs Using Dynamic Invocation in C#

Explore advanced techniques for bypassing Endpoint Detection and Response systems using Dynamic Invocation in C#, enhancing your understanding of cybersecurity vulnerabilities and defenses.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Automated Adversary Emulation Using Caldera

Explore automated adversary emulation with MITRE Caldera 2.0, focusing on extending its capabilities, improving reporting, and overcoming security controls for enhanced ATT&CK coverage and adoption.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk