44CON Talks & Presentations

44CON Information Security Conference

Can Twitter Really Expose Psychopath Killers' Traits?

Explore the potential of Twitter data to reveal psychopathic traits in killers. Delve into psychological research, profiling techniques, and the intersection of social media and criminal behavior analysis.

• YouTube
• 1 hour 11 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

SexyDefense - Maximizing the Home-Field Advantage

Maximizing home-field advantage in cybersecurity through proactive defense, intelligence gathering, and attacker modeling. Learn to adapt strategies, set traps, and take initiative for effective protection.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

44CON Information Security Conference

For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems

Explore vulnerabilities in mobile point-of-sale systems, including MitM attacks, arbitrary code injection, and firmware exploitation. Learn to identify weaknesses and conduct security assessments in payment technologies.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Exploits with Scratch

Explore network exploitation using Scratch programming language, extending its capabilities to create exploits and fuzz vulnerable services through custom TCP/IP function blocks.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Using SmartNICs to Provide Better Data Center Security

Explore SmartNIC-based data center security, featuring improved isolation, offload capabilities, and policy scaling. Learn about innovative host introspection techniques for enhanced threat detection and workload integrity.

• YouTube
• 1 hour 7 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

JARVIS Never Saw It Coming - Hacking Machine Learning in Speech, Text and Face Recognition

Explore hacking techniques for machine learning systems in speech, text, and facial recognition, including exploits, backdoors, and adversarial attacks. Live demo included.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Catch Me If You Can - Ephemeral Vulnerabilities in Bug Bounties

Explore ephemeral vulnerabilities in bug bounties, their impact, and how to identify and exploit them. Learn from real-world examples and strategies for continuous security assessment.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

ARM Assembly and Shellcode Basics - Workshop

Comprehensive workshop on ARM assembly and shellcode creation, covering basics, execve() shell, and reverse shell. Includes hands-on practice with QEMU emulator and Raspberry Pi hardware.

• YouTube
• 2 hours 16 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

BaRMIe - Poking Java’s Back Door

Explore Java's Remote Method Invocation security vulnerabilities, enumeration techniques, and exploitation tools with BaRMIe. Learn about common mistakes and potential solutions in RMI implementations.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Subgraph OS - Hardening a Linux Desktop

Explore Subgraph OS: a hardened Linux desktop with advanced security features, including kernel protection, application sandboxing, and network safeguards.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Cisco ASA Episode 2 - Striking Back - Internals and Mitigations

Explore Cisco ASA internals, reverse engineering techniques, and custom tools for exploit development. Gain insights into vulnerability analysis and mitigation strategies for network security professionals.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Red Team Revenge - Attacking Microsoft ATA

Explore techniques for attacking Microsoft Advanced Threat Analytics, including alert suppression, identity exemption, and remote control. Learn about ATA's vulnerabilities and defensive strategies.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Cracking HiTag2 Crypto - Weaponising Academic Attacks for Breaking and Entering

Explore HiTag2 RFID encryption vulnerabilities and learn to implement attacks for cloning secure building access tags, based on academic research and practical demonstrations.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Secrets Of The Motherboard - Shit My Chipset Says

Explore motherboard intricacies, security features, and hidden functionalities. Uncover potential exploits, design pitfalls, and challenges in hardware security through chipset analysis and datasheet discoveries.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Cryptanalysis of the Enigma Machine

Explore the cryptanalysis of the Enigma machine, its historical significance, and the techniques used to break its code during World War II.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk