Hack.lu Talks & Presentations

Cooper

Modern Pentest Tricks for Faster, Wider, Greater Engagements

Discover cutting-edge pentest techniques for efficient and comprehensive engagements, focusing on CSV tools, parallel execution, and innovative applications.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Cooper

Take Your Path Normalization Off and Pop 0days Out

Explore path normalization vulnerabilities in web frameworks, including real-world examples and case studies of critical security flaws leading to remote code execution and access control bypass.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cooper

Finding the Best TI Provider for a Specific Purpose

Explore methodologies for evaluating and selecting the most suitable Threat Intelligence provider, focusing on comparison metrics, data analysis, and key takeaways for various cybersecurity roles.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Cooper

Make ARM Shellcode Great Again

Explore ARM shellcode techniques, from basic execve() to advanced "Quantum Leap" code, covering tight spaces, mprotect egghunters, and ARM-Thumb switching for efficient exploitation.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Cooper

Digital Safety for Politically Vulnerable Organizations

Learn strategies for protecting politically vulnerable organizations from digital threats, covering physical and psychological security, incident response, and data retention policies.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cooper

IPC - The Broken Dream of Inherent Security

Explore vulnerabilities in inter-process communication (IPC) systems, including network sockets, Windows named pipes, and USB devices. Learn about potential attacks and mitigation strategies.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Cooper

Bypassing ISP and Enterprise Anti-DDoS with 90's Technology

Explore techniques for bypassing anti-DDoS measures using older technologies, focusing on UDP data analysis, intelligence gathering, and protocol effectiveness.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Cooper

Trojans in SS7 - How They Bypass All Security Measures

Explore SS7 vulnerabilities and Trojan attacks that bypass security measures, focusing on signal messages, numbering plans, and location tracking in mobile networks.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Cooper

What The Fax?

Explore the security vulnerabilities of fax technology, including debugging challenges, attack vectors, and mitigation strategies in this comprehensive analysis.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cooper

The Snake Keeps Reinventing Itself

Explore the evolution and tactics of "The Snake" malware, including infection vectors, lateral movement, and backdoor mechanisms in this cybersecurity analysis.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cooper

Real World - Threat Intelligence

Explore real-world threat intelligence in activism, emergency response, and political adversaries. Learn to diagnose problems, develop treatment plans, and understand various security threats.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Cooper

TIDS - A Framework for Detecting Threats in Telecom Networks

Explore a framework for detecting threats in telecom networks, covering monitoring, data collection, and analytics to protect infrastructure and subscribers from various attacks and privacy issues.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Cooper

Vulnerability Disclosure, Governments and You

Explore vulnerability disclosure's evolution, its impact on policy-making, and the role of governments. Learn about bug bounties, legal considerations, and international efforts in cybersecurity.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Cooper

On Strategy

Guidance for development teams on implementing effective security strategies, covering risk assessment, compliance, staffing, and integrating security into organizational culture and processes.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Cooper

Digital Vengeance - Exploiting Notorious C&C Toolkits

Explore techniques for exploiting notorious Remote Administration Tools used in targeted attacks, turning the tables on sophisticated adversaries and exposing vulnerabilities in their command and control systems.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk