44CON Talks & Presentations

44CON Information Security Conference

Penetration Testing Considered Harmful

Critique of penetration testing practices, exploring limitations, misconceptions, and potential harm in cybersecurity. Proposes alternative approaches and challenges industry norms.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

USB Flash Drive Forensics

Explore USB flash drive forensics, covering hardware, software, file systems, and forensic techniques. Learn about write blockers, Windows registry analysis, and open-source tools for digital investigations.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Systems Applications Proxy Pwnage

Explore SAP system vulnerabilities, compression algorithms, and attack techniques. Learn about authentication bypass, validation issues, and practical demonstrations for enhanced security awareness.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Supply Chain Unchained - How To Be A Bad SaaS

Explore software supply chain vulnerabilities, focusing on SaaS security. Learn about access control, API restrictions, maturity evaluation, logging, cloud security, and code integrity.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Aviation Security 101

Explore aviation security vulnerabilities through pen testing research, covering access risks, performance calculations, maintenance mode issues, and potential misunderstandings in the industry.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

The Anti-Checklist Manifesto

Explore effective third-party risk assessment beyond checklists. Learn to ask insightful questions that reveal an organization's commitment to security and trustworthiness in the software supply chain.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Why Are We Still Doing Authentication Wrong?

Explore common authentication pitfalls, costs, and phases. Learn about 2FA misconceptions, password security, and new guidelines for robust authentication practices in the digital age.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

What Do Hackers See When They Look at the Clouds

Explore cloud security vulnerabilities, historical incidents, and protective measures. Learn to identify abandoned subdomains and bypass firewalls in this eye-opening talk on hacker perspectives.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Why Security-as-a-Feature Will Never Happen

Explore why secure coding remains elusive, examining cultural issues, industry challenges, and potential solutions for integrating security into software development practices.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

DeepFake Cyber Security Threats and Opportunities

Explore deepfake technology's impact on cybersecurity, covering threats like fraud and fake content, as well as opportunities in biometrics and network traffic analysis.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Playbook on How to Be the First Security Engineer at a Company

Learn strategies for being a pioneering security engineer, covering impact, documentation, data storage, education, automation, and corporate security initiatives.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

CAN Bus Basics With Hands On Fuzzing

Explore CAN bus fundamentals and hands-on fuzzing techniques for automotive systems, covering ECUs, attack surfaces, and practical demonstrations using various tools and setups.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Breaking Badge

Explore badge hacking techniques, including card reader software, reading/writing cards, and security encryption, with practical insights and a Python script demonstration.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Dial V for Vulnerable - Attacking VoIP Phones

Explore VoIP phone vulnerabilities, attack methods, and security recommendations. Learn firmware access, emulation approaches, and exploit development for various VoIP devices.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

BYOI Payloads - Fusing the Power of .NET With a Scripting Language of Your Choosing

Explore .NET assembly generation, embedding scripting languages, and advanced techniques for creating versatile payloads in this cybersecurity-focused talk on BYOI (Bring Your Own Interpreter).

• YouTube
• 54 minutes
• On-Demand
• Conference Talk