BruCON Talks & Presentations

BruCON Security Conference

DNS as Critical Infrastructure - Do You Know Where Your Domain Is?

1 review

Explores DNS as critical infrastructure, examining its evolution, security measures, and operational challenges. Analyzes ccTLD operations, hosting risks, and adoption of security features like DNSSEC and CAA records.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Being a Cyberdefender - Behind the Curtains

Explore the realities of cyberdefense, including incident management, communication challenges, and maintaining work-life balance in this insightful talk by a seasoned professional.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Bypassing Microsoft Defender for Identity

Explore techniques to bypass Microsoft Defender for Identity, executing high-impact attacks across the kill chain while avoiding detection in on-premises Active Directory environments.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

A Black-Box Security Evaluation of the SpaceX Starlink User Terminal

Exploración de seguridad del terminal Starlink: vulnerabilidades, ataques de inyección de fallas y acceso root. Análisis de la red Starlink y sus implicaciones para futuras investigaciones.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Android Malware Targeting Belgian Financial Apps

Explore Android malware's evolution, focusing on banking trojans targeting Belgian apps. Learn about various malware types, their mechanisms, and strategies for protection.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

BruCON Security Conference

Chasing the White Whale of Malware

Exploring techniques to identify and analyze operational technology malware, focusing on unique challenges and methods for filtering OT binaries without advanced reverse engineering skills.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

ECOS Offensive Security Research Logbook

Explore eCos RTOS security, from firmware analysis to exploitation and persistence. Learn techniques for cable modem research, including memory corruption, shellcode development, and implant creation.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Automating Binary Analysis with Ghidra's P-Code

Explore automated binary analysis using Ghidra's P-Code, an intermediate language that enables architecture-independent scripting for reverse engineering and vulnerability research.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Tales from Professional Thieves

Professional thieves share insider techniques for bypassing physical security, including sneaking in, fake badges, and social engineering, along with entertaining stories from real-world engagements.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Internet Scale Analysis of AWS Cognito Security

Análisis de seguridad a escala de Internet de configuraciones de AWS Cognito, revelando vulnerabilidades comunes y acceso no autorizado a recursos de AWS. Incluye demostraciones, metodología y recomendaciones para desarrolladores.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

It Takes a Village

Strategies for building diverse security teams, addressing hiring challenges, and fostering talent through mentorship and professional development in the rapidly evolving cybersecurity landscape.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Security Transition from 4G to 5G - Are We Secure Enough?

Exposición de vulnerabilidades en protocolos 5G/4G, afectando operadores y dispositivos. Demostraciones de ataques de secuestro, degradación y agotamiento de batería. Discusión de soluciones y interacciones con proveedores.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Cloud SIEM - What Happened and What's Next?

Explore cloud SIEM's impact on cybersecurity, from real-time threat detection to AI-driven responses. Learn how this technology reshapes security teams, risk management, and the future of threat hunting.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Using Blue Team Techniques in Red Team Ops

Innovative techniques for advanced red team operations, including infrastructure management, blue team detection, and dynamic adjustments to enhance effectiveness and evasion.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Process Control through Counterfeit Comms

Explore vulnerabilities in PLCs, focusing on discovery methods and how combining minor flaws can lead to device takeover. Learn about SNMP exploitation, memory manipulation, and firmware modification.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk