44CON Talks & Presentations

44CON Information Security Conference

Meterpreter - Understanding the New Shiny

Explore Meterpreter's evolution, new features, and advanced techniques for red team engagements. Learn about stageless payloads, transport modification, and persistence to enhance network penetration capabilities.

• YouTube
• 1 hour 21 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Get in the Ring - Understanding Windows Drivers

Explore Windows drivers: IRPs, IRQLs, device objects, function handlers, I/O controls, and memory access. Gain practical insights for driver development and debugging.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

MITMf - Bringing Man In The Middle Attacks to the 21st Century

Explore modern Man-In-The-Middle attack techniques with MITMf, a Python framework combining new and old methods for efficient, extendable, and reliable network security testing.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Lessons Learned from Black Hat’s Infrastructure - The Tweets Must Flow

Explore Black Hat's infrastructure, network challenges, and security measures. Learn about wired and wireless setups, threat modeling, and lessons for building robust conference networks.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Researching Android Device Security with the Help of a Droid Army

Explore Android device security using a diverse cluster, addressing fragmentation challenges and enabling efficient vulnerability research and testing across multiple devices.

• YouTube
• 1 hour 8 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

GreedyBTS - Hacking Adventures in GSM

Explore GSM network vulnerabilities and attack tools that compromise phone calls, messaging, and web browsing. Learn about GSM architecture, weaknesses, and practical demonstrations of exploits.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Breaking AV Software

Explore vulnerabilities in antivirus software, focusing on discovery and exploitation techniques. Learn about attack surfaces, fuzzing, and specific vulnerabilities in popular AV engines.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Bootstrapping an Architectural Research Platform

Explore x86 architecture for security research: privileges, events, hypervisors, and emerging tech. Gain foundational knowledge to streamline your research setup and focus on key questions.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Advanced Incident Remediation Techniques

Explore advanced incident remediation techniques for large network breaches, including mass remediation and outrunning the attacker. Learn from real-world experiences to effectively handle complex security incidents.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

What the HEC - Security Implications of HDMI Ethernet Channel and Other Related Protocols

Explore security implications of HDMI protocols like CEC and HEC, including potential vulnerabilities and corporate risks. Includes demonstration of CEC security testing tool.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Security Testing 4G - LTE Networks

Explore 4G/LTE network security, potential vulnerabilities, and testing methods. Learn about LTE deployments, attack vectors, and strategies for securing these networks.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Inside .NET Smart Card Operating System

Explore reverse engineering of .NET smart card operating systems, focusing on code analysis and communication protocols to uncover vulnerabilities and test security measures.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Software Defined Networking - SDN Security

Explore SDN security implications, attack surfaces, and vulnerabilities with live exploit demos. Learn about efforts to enhance SDN controller security and future developments.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Exploiting 64 Bit IE on Windows 8.1 - The Pwn2Own Case Study

Detailed exploration of vulnerabilities and exploit techniques used to compromise 64-bit Internet Explorer on Windows 8.1, including ASLR & CFG bypass and sandbox escape, as demonstrated at Pwn2Own 2015.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Windows 10 - 2 Steps Forward, 1 Step Back

Explore Windows 10's security features and vulnerabilities, examining new protections and potential weaknesses in system services, Edge browser, and user account control.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk