Ekoparty Security Conference Courses

How to Hijack a VoLTE Network

Exploración detallada de vulnerabilidades en redes VoLTE, demostrando cómo un atacante puede acceder y controlar la red IMS con equipo económico, permitiendo servicios móviles no autorizados.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Breaking Secure Boot on the Silicon Labs Gecko Platform

Exploración detallada de una vulnerabilidad en el SDK Gecko de Silicon Labs, revelando cómo se puede eludir el arranque seguro y la verificación de firmware en dispositivos IoT.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Windows Event Log Persistence Techniques - Bypassing Protections and Maintaining Access

Explore Windows Event Log persistence techniques, bypassing security measures, and elevating privileges in red team operations. Learn innovative approaches for undetectable attacks using Windows itself.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Privilege Escalation from Medium to High Integrity Level in Windows

Unveiling a Windows design flaw allowing privilege escalation from Medium to High integrity level, demonstrating a 100% reliable exploit on the latest Windows versions.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Uncovering Honeypot's Flawed Logic for Counter-Intelligence

Uncover novel techniques to identify and exploit flawed logic in honeypots, enabling counter-intelligence activities. Learn about comprehensive research on 40 honeypots and global scan analysis findings.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Breaking TETRA: Security Analysis of Terrestrial Trunked Radio

Unveiling security flaws in TETRA radio systems used by government agencies and critical infrastructure. Demonstrates vulnerabilities in encryption, authentication, and identity protection, enabling practical attacks on confidentiality and integrity of c…

• YouTube
• 44 minutes
• On-Demand
• Free Video

Smashing the TLB for Fun and Profit - Exploring CPU Bugs in Virtual Memory Implementation

Exploración de vulnerabilidades en la implementación de memoria virtual de CPUs modernas, enfocándose en paginación y TLB, y su impacto en la seguridad, especialmente en virtualización y SLAT (EPT).

• YouTube
• 51 minutes
• On-Demand
• Free Video

Making Privacy Work - Production Engineering Applied to Privacy Infrastructure

Explore challenges and solutions in privacy infrastructure, comparing open-source and commercial options. Learn from Meta's experience in building scalable, secure, and efficient privacy systems.

• YouTube
• 50 minutes
• On-Demand
• Free Video

A Journey Finding Pre and Post-Auth D-Link Router Zero-Days

Explora el proceso de descubrimiento y explotación de vulnerabilidades 0-day en routers D-Link, desde obtener acceso al firmware hasta identificar y explotar fallos de seguridad para lograr ejecución remota de código.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Indirect Prompt Injections in the Wild - Real World Exploits and Mitigations

Explore emerging LLM security risks, including Indirect Prompt Injections and data exfiltration. Learn real-world exploits and mitigation strategies for ChatGPT, Google Bard, and other AI platforms.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Becoming a Dark Knight: Adversary Emulation Demonstration for ATT&CK Evaluations

Explore adversary emulation for cybersecurity through CTI analysis, red team development, and attack simulation. Learn to improve defenses by understanding and replicating advanced threat actors' techniques.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Introduction to Beacon Object Files in Red-Team Operations

Explore Beacon Object Files for red-teaming, including COFF format, in-memory execution, and Coffee - a Rust COFF loader. Learn to enhance C2 agents and bypass AV/EDR protection.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Hijacking an IP Camera Stream: SADProtocol Vulnerabilities and Hollywood-Style Exploitation

Explore real-world IP camera hijacking through LAN RCE vulnerabilities, diving into firmware analysis, exploit development, and post-exploitation techniques to manipulate video streams while maintaining camera functionality.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Removing OPSEC from Cyber Predators and Threat Actors

Análisis de 4Tb de logs de malware para identificar perfiles legítimos de actores de amenazas, demostrando vulnerabilidades en sus métodos de OPSEC y potencial para validación forense.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Scarlet OT - Adversary Emulation for Operational Technology

Herramienta de emulación de adversarios OT de código abierto que combina ataques IT y OT, reproduce acciones de malware ICS y soporta múltiples protocolos para pruebas de seguridad industrial eficientes.

• YouTube
• 45 minutes
• On-Demand
• Free Video