44CON Talks & Presentations

44CON Information Security Conference

MITMf - Bringing Man In The Middle Attacks to the 21st Century

Explore modern Man-In-The-Middle attack techniques with MITMf, a Python framework combining new and old methods for efficient, extendable, and reliable network security testing.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Lessons Learned from Black Hat’s Infrastructure - The Tweets Must Flow

Explore Black Hat's infrastructure, network challenges, and security measures. Learn about wired and wireless setups, threat modeling, and lessons for building robust conference networks.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Researching Android Device Security with the Help of a Droid Army

Explore Android device security using a diverse cluster, addressing fragmentation challenges and enabling efficient vulnerability research and testing across multiple devices.

• YouTube
• 1 hour 8 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

GreedyBTS - Hacking Adventures in GSM

Explore GSM network vulnerabilities and attack tools that compromise phone calls, messaging, and web browsing. Learn about GSM architecture, weaknesses, and practical demonstrations of exploits.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Breaking AV Software

Explore vulnerabilities in antivirus software, focusing on discovery and exploitation techniques. Learn about attack surfaces, fuzzing, and specific vulnerabilities in popular AV engines.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Bootstrapping an Architectural Research Platform

Explore x86 architecture for security research: privileges, events, hypervisors, and emerging tech. Gain foundational knowledge to streamline your research setup and focus on key questions.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Advanced Incident Remediation Techniques

Explore advanced incident remediation techniques for large network breaches, including mass remediation and outrunning the attacker. Learn from real-world experiences to effectively handle complex security incidents.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

What the HEC - Security Implications of HDMI Ethernet Channel and Other Related Protocols

Explore security implications of HDMI protocols like CEC and HEC, including potential vulnerabilities and corporate risks. Includes demonstration of CEC security testing tool.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Top 5 Media Fails

Explore common media mistakes in IT security reporting, analyzing causes and bridging the gap between journalists and security professionals.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Payment Applications Handle Lots of Money. No, Really - Lots of It.

Explore payment application security, from business processes to technical risks. Learn about attack surfaces, crypto-based countermeasures, and real-world solutions to protect financial transactions.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Hot or Not, the Hacker Way

Exploring thermal imaging in information security: hacking a FLIR E4 for enhanced resolution and uncovering surprising heat signatures from computers.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Pentesting NoSQL DB's Using NoSQL Exploitation Framework

Explore NoSQL database vulnerabilities and exploitation techniques for MongoDB, CouchDB, and Redis using the NoSQL Exploitation Framework. Learn about injection attacks, security issues, and automated penetration testing methods.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Manna from Heaven - Improving the State of Wireless Rogue AP Attacks

Explores modern techniques for enhancing wireless rogue AP attacks, including network spoofing and authentication interception. Introduces a new toolkit for implementing advanced attack strategies.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

I Hunt TR-069 Admins - Pwning ISPs Like a Boss

Exploring TR-069/CWMP vulnerabilities in residential gateways and ACS software, demonstrating potential for mass exploitation of consumer devices through ISP management systems.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

When Documents Bite

Explore malicious document attacks, their evolution, and impact on cybersecurity. Learn about real-world techniques and strategies for defending against targeted attacks in enterprise networks.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk