Ekoparty Security Conference Courses

Quick and Dirty Cloud Incident Response Tactics - Santi Abastante

Tácticas rápidas de respuesta a incidentes en la nube: demostración práctica de detección y mitigación de amenazas en AWS utilizando herramientas nativas, basado en escenarios reales de ataques.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Free Video

Hackers, Clickbait, and Ratings - A Journalist's Perspective on Cybersecurity Reporting

Análisis de la relación entre hackers, clickbait y rating desde la perspectiva periodística, explorando los desafíos del periodismo y la importancia de la participación comunitaria en la difusión de información tecnológica.

• YouTube
• 54 minutes
• On-Demand
• Free Video

Weaponizing Plain Text - ANSI Escape Sequences as a Forensic Nightmare

Explore how ANSI escape sequences can inject, vandalize, and weaponize plaintext logfiles. Learn about terminal injection, log tampering techniques, and their modern implications for cloud CLI's and DevOps environments.

• YouTube
• 49 minutes
• On-Demand
• Free Video

How to Hijack a VoLTE Network

Exploración detallada de vulnerabilidades en redes VoLTE, demostrando cómo un atacante puede acceder y controlar la red IMS con equipo económico, permitiendo servicios móviles no autorizados.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Breaking Secure Boot on the Silicon Labs Gecko Platform

Exploración detallada de una vulnerabilidad en el SDK Gecko de Silicon Labs, revelando cómo se puede eludir el arranque seguro y la verificación de firmware en dispositivos IoT.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Windows Event Log Persistence Techniques - Bypassing Protections and Maintaining Access

Explore Windows Event Log persistence techniques, bypassing security measures, and elevating privileges in red team operations. Learn innovative approaches for undetectable attacks using Windows itself.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Privilege Escalation from Medium to High Integrity Level in Windows

Unveiling a Windows design flaw allowing privilege escalation from Medium to High integrity level, demonstrating a 100% reliable exploit on the latest Windows versions.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Uncovering Honeypot's Flawed Logic for Counter-Intelligence

Uncover novel techniques to identify and exploit flawed logic in honeypots, enabling counter-intelligence activities. Learn about comprehensive research on 40 honeypots and global scan analysis findings.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Breaking TETRA: Security Analysis of Terrestrial Trunked Radio

Unveiling security flaws in TETRA radio systems used by government agencies and critical infrastructure. Demonstrates vulnerabilities in encryption, authentication, and identity protection, enabling practical attacks on confidentiality and integrity of c…

• YouTube
• 44 minutes
• On-Demand
• Free Video

Smashing the TLB for Fun and Profit - Exploring CPU Bugs in Virtual Memory Implementation

Exploración de vulnerabilidades en la implementación de memoria virtual de CPUs modernas, enfocándose en paginación y TLB, y su impacto en la seguridad, especialmente en virtualización y SLAT (EPT).

• YouTube
• 51 minutes
• On-Demand
• Free Video

Making Privacy Work - Production Engineering Applied to Privacy Infrastructure

Explore challenges and solutions in privacy infrastructure, comparing open-source and commercial options. Learn from Meta's experience in building scalable, secure, and efficient privacy systems.

• YouTube
• 50 minutes
• On-Demand
• Free Video

A Journey Finding Pre and Post-Auth D-Link Router Zero-Days

Explora el proceso de descubrimiento y explotación de vulnerabilidades 0-day en routers D-Link, desde obtener acceso al firmware hasta identificar y explotar fallos de seguridad para lograr ejecución remota de código.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Indirect Prompt Injections in the Wild - Real World Exploits and Mitigations

Explore emerging LLM security risks, including Indirect Prompt Injections and data exfiltration. Learn real-world exploits and mitigation strategies for ChatGPT, Google Bard, and other AI platforms.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Becoming a Dark Knight: Adversary Emulation Demonstration for ATT&CK Evaluations

Explore adversary emulation for cybersecurity through CTI analysis, red team development, and attack simulation. Learn to improve defenses by understanding and replicating advanced threat actors' techniques.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Introduction to Beacon Object Files in Red-Team Operations

Explore Beacon Object Files for red-teaming, including COFF format, in-memory execution, and Coffee - a Rust COFF loader. Learn to enhance C2 agents and bypass AV/EDR protection.

• YouTube
• 37 minutes
• On-Demand
• Free Video