BruCON Talks & Presentations

BruCON Security Conference

Hunting Android Malware - A Novel Runtime Technique for Identifying Applications

Novel Android malware detection technique analyzing application HEAP at runtime, identifying dangerous objects without APK access. Potential integration with Android Attestation Framework for real-time malicious app identification.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Finding 0days in Embedded Systems with Code Coverage Guided Fuzzing

Innovative fuzzing technique for embedded systems, overcoming challenges to discover critical vulnerabilities in network devices through emulation, dynamic binary instrumentation, and guided fuzzing.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

When Lemon Markets, Imposter Syndrome & Dunning-Kruger Collide

Explore the challenges in organizational security and product development, and discover strategies for improvement in this insightful cybersecurity talk.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

The 99c Heart Surgeon Dilemma

Explores common mistakes in penetration testing, comparing it to hiring a heart surgeon. Discusses issues faced by testers and customers, and examines if the industry has improved since 2011.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Reinvestigating PowerShell Attacks

Explore the evolution of PowerShell attacks, offensive techniques, and defensive strategies since 2014, including insights on Desired State Configuration for covert persistence and command and control.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

BruCON Security Conference

Levelling Up Security at Riot Games

Explore Riot Games' innovative security program, focusing on feedback, self-service, and developer collaboration. Learn from successes and failures in implementing a hybrid infrastructure approach.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Advanced WiFi Attacks Using Commodity Hardware

Explore advanced WiFi attacks using modified firmware on off-the-shelf dongles and mobile phones. Learn about jamming techniques, man-in-the-middle attacks, and vulnerabilities in WPA-TKIP and WPA2 protocols.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Weaponizing the BBC Micro - Bit

Transforming BBC Micro:Bit into a powerful wireless attack tool for sniffing keystrokes, hijacking quadcopters, and interacting with 2.4GHz protocols. Open-source firmware enables affordable, portable RF hacking.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

XFLTReaT - A New Dimension in Tunnelling

Explore XFLTReaT, an open-source tunnelling framework that simplifies network bypassing. Learn about its versatile modules, customization options, and potential applications in various scenarios.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Browser Exploits - Grab Them by the Collar

Explore a novel browser exploit detection technique using Live Network Stream Code Injection, offering agentless protection against modern browser-based attacks without OS API hooking or code injection.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

How Hackers Changed the Security Industry and How We Need to Keep Changing It

Explore the transformative impact of hackers on cybersecurity and the ongoing need for industry evolution with insights from a leading expert.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Detecting Malware Even When It Is Encrypted

Innovative machine learning approach for detecting malware in encrypted HTTPS traffic using Bro IDS logs, without decryption. Focuses on behavioral features and connection 4-tuples for improved accuracy.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Secure Channels - Building Real World Crypto Systems

Explore secure channel cryptography, including key establishment, data protection, and essential properties. Learn about famous security bugs and recent improvements in SSH and TLS implementations.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

An Overview of the CMS Brute-Forcing Malware Landscape

Explore CMS brute-forcing malware, focusing on WordPress attacks. Analyze prominent botnets, their capabilities, and a case study of Sathurbot. Learn detection methods for identifying and preventing these threats.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Smart Sheriff, Dumb Idea

Explore security vulnerabilities in parental control apps, focusing on Smart Sheriff's flaws and the broader implications for user privacy and data protection.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk