Hack in Paris Talks & Presentations

Hack in Paris

Down the Rabbit Hole - A Journey Towards a Weakness in Chrome and a New Hacking Technique

Explore a journey from CRLF injection to discovering Chrome vulnerabilities and a new XSS-like technique called Frontjacking, bypassing existing web security defenses.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Hack in Paris

Why React Applications Get Hacked in the Real-World

Explore common security pitfalls in React applications and learn practical strategies to prevent XSS vulnerabilities, insecure API usage, and other real-world hacking risks.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Hack in Paris

Weaponizing Rsync 0Day Vulnerability

Discover a critical 25-year-old vulnerability in Rsync enabling code execution and silent lateral network movement. Learn about its discovery, impact, and weaponization from PRODAFT researchers.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Hack in Paris

Exploiting Volatile Memory Analysis Challenges for Fun and Profit

Automated memory analysis tool for efficient malware detection and artifact extraction, featuring visual representation, data cross-referencing, and System Manifest for rapid context reloading.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Hack in Paris

Strong Story to Tell - Top 10 Mistakes by Administrators about Remote Work

Discover top 10 remote work security mistakes, hacker perspectives, and effective solutions. Learn to protect corporate infrastructure from cyber threats in this insightful presentation by cybersecurity expert Paula Januszkiewicz.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Hack in Paris

If Descartes Applied Counter Deception in Cyberspace

Explore Descartes' stages of doubt to recognize psychological manipulation in cyberspace and learn effective mitigation techniques against deception in the digital realm.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Hack in Paris

Pinata - PIN Automatic Try Attack

Explore an extreme PIN brute force attack on EMV cards, analyzing vulnerabilities in implementation that could compromise millions of contact cards despite security measures.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Hack in Paris

I Know What Your Microsoft Mainframe Did Last Summer

Explore Active Directory forensics, lateral movement, and reconnaissance techniques. Learn to hunt for clues without AD logs using open-source tools in this hands-on session with real-world incident insights.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Hack in Paris

How to Measure the Security of Your Network Protection Devices

Explore methods to quantify network security device performance, efficacy, and risk. Learn to assess defensive appliances for better security design and network protection strategies.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Hack in Paris

Biohacker - The Invisible Threat

Explore the emerging threat of biohackers with surgically implanted offensive security tools. Learn about this unique cybersecurity challenge and strategies to address augmented humans in your environment.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Hack in Paris

Offensive Hunting - Using Blue Team Techniques in Red Team Ops

Explore offensive hunting techniques combining red and blue team approaches. Learn to leverage data from various sources during extensive red teaming operations for more effective penetration testing.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Hack in Paris

Cannibal Hacking - From Zero the Hero to Hammer Smashed Host

Explore advanced hacking techniques to exploit web servers, deliver malware, and evade detection. Learn ethical implications and defensive strategies against these sophisticated attacks.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Hack in Paris

Whoami Priv - Show Me Your Privileges and I Will Lead You to SYSTEM

Explore Windows privilege escalation techniques, focusing on token manipulation and privilege abuse to achieve SYSTEM-level access. Learn about SeImpersonate, SeAssignPrimary, and the Juicy Potato exploit.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Hack in Paris

Who Watches the Watchmen - Adventures in Red Team Infrastructure Herding and Blue Team OPSEC Failures

Explore red team infrastructure management and blue team OPSEC failures. Learn about RedELK, a tool for controlling operations and detecting blue team activities during multi-month engagements.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Hack in Paris

DPAPI and DPAPI-NG Decrypting All Users’ Secrets and PFX Passwords

Discover groundbreaking techniques for decrypting DPAPI-protected data and SID-protected PFX files, revealing potential vulnerabilities in Windows systems and enterprise security.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk