Hack.lu Talks & Presentations

Cooper

Sigma - Generic Signatures for Log Events

Explore generic signatures for log events with Sigma, a YAML-based format for sharing and converting log signatures across different SIEM systems and query languages.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Cooper

Modern Pentest Tricks for Faster, Wider, Greater Engagements

Discover cutting-edge pentest techniques for efficient and comprehensive engagements, focusing on CSV tools, parallel execution, and innovative applications.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Cooper

Take Your Path Normalization Off and Pop 0days Out

Explore path normalization vulnerabilities in web frameworks, including real-world examples and case studies of critical security flaws leading to remote code execution and access control bypass.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cooper

Trojans in SS7 - How They Bypass All Security Measures

Explore SS7 vulnerabilities and Trojan attacks that bypass security measures, focusing on signal messages, numbering plans, and location tracking in mobile networks.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Cooper

Intel AMT - Using & Abusing the Ghost in the Machine

Explore Intel AMT vulnerabilities and forensics techniques. Learn about potential attacks, mitigations, and non-destructive investigation methods for compromised systems. Gain insights into remote management technology risks.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Cooper

When Crypto Fails

Exploring real-world cryptographic failures in malware, this talk offers insights into identifying and potentially exploiting these vulnerabilities, with practical examples and a useful triage tool.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Cooper

WiFi Exploitation - How Passive Interception Leads to Active Exploitation

Explore WiFi exploitation techniques, from passive interception to active attacks. Learn about device profiling, rogue access points, and MitM attacks. Includes demonstration of a new sensor framework for visualizing 802.11 data.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Cooper

Interesting Malware - No, I’m Not Kidding

Explore the intriguing CheshireCat malware family, its unique traits, and stealth tactics. Learn about its decade-long operation, retro coding style, and functional obfuscation techniques.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cooper

A Network of Sorrows - Small Adversaries and Small Allies

Exploring the impact of everyday security threats on ordinary people and advocating for user empowerment to build a safer internet through knowledge sharing and community support.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Cooper

Exploit Generation and JavaScript Analysis Automation with WinDBG

Automate exploit generation and JavaScript analysis with WinDBG. Learn techniques for creating exploits from PoC crashes and tracking obfuscated JavaScript without triggering anti-debugging measures.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Cooper

Finding the Best TI Provider for a Specific Purpose

Explore methodologies for evaluating and selecting the most suitable Threat Intelligence provider, focusing on comparison metrics, data analysis, and key takeaways for various cybersecurity roles.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Cooper

Make ARM Shellcode Great Again

Explore ARM shellcode techniques, from basic execve() to advanced "Quantum Leap" code, covering tight spaces, mprotect egghunters, and ARM-Thumb switching for efficient exploitation.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Cooper

Digital Safety for Politically Vulnerable Organizations

Learn strategies for protecting politically vulnerable organizations from digital threats, covering physical and psychological security, incident response, and data retention policies.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cooper

IPC - The Broken Dream of Inherent Security

Explore vulnerabilities in inter-process communication (IPC) systems, including network sockets, Windows named pipes, and USB devices. Learn about potential attacks and mitigation strategies.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Cooper

Bypassing ISP and Enterprise Anti-DDoS with 90's Technology

Explore techniques for bypassing anti-DDoS measures using older technologies, focusing on UDP data analysis, intelligence gathering, and protocol effectiveness.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk