ShmooCon Talks & Presentations

0xdade

Security Response Survival Skills

1 review

Strategies for managing human factors during security incidents, focusing on psychological responses, effective communication, and team leadership in high-stress situations.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

0xdade

Process Control Through Counterfeit Comms - Using and Abusing Built-In Functionality to Own a PLC

1 review

Explore vulnerabilities in PLCs, learn discovery methods, and see how minor flaws can lead to device takeover. Gain insights into industrial control system security and potential exploits.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

0xdade

Chip Decapping on a Budget

Learn DIY integrated circuit decapping techniques to reveal hidden chip designs using budget-friendly methods. Explore mechanical and chemical removal processes, laser cutting, and more.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

0xdade

Adventures in Hardware Hacking or Building Expensive Tools on a Budget

Explore hardware hacking techniques like CT scanning and chip decapping for non-destructive device analysis, circuit reconstruction, and vulnerability identification in embedded systems and access control.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

0xdade

Whitelisting LD PRELOAD for Fun and No Profit

Explore LD_PRELOAD process injection, its audit system, and whitelisting challenges. Learn about built-in protection vs. bolt-on solutions for Linux security.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

0xdade

5G Protocol Vulnerabilities and Exploits

Explore 5G protocol vulnerabilities and exploits, analyzing real traffic captures to uncover potential security issues in pre-authentication messages and discuss implications for mobile network security.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

0xdade

Real World Zero Trust Implementation

Practical insights on implementing Zero Trust security in a cloud-based, remote work environment. Covers challenges, solutions, and lessons learned from real-world experience.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Command and KubeCTL - Real-World Kubernetes Security for Pentesters

Explore Kubernetes security challenges, attack techniques, and practical advice for pentesters and security practitioners in containerized environments.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

0xdade

Crossing the Border With Your Electronic Devices

Explore legal and technological aspects of protecting digital privacy during border crossings, with insights on device security and traveler rights.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Cisco SMB Products - Critical Vulnerabilities - 0-Day Release

Detailed examination of critical 0-day vulnerabilities in Cisco SMB switches, including web application and API exploits, leading to complete endpoint compromise and data leakage.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

0xdade

Resistance Isn't Futile - A Practical Approach to Prioritizing Defenses with Threat Modeling

Practical approach to threat modeling for prioritizing defenses. Learn to identify relevant adversaries, match them to your organization, and take action to improve security posture.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

0xdade

What if We Had TLS for Phone Numbers? An Introduction to SHAKEN - STIR

Explore SHAKEN/STIR, a new tech standard using public key cryptography to combat phone number spoofing and reduce spam calls, with insights on implementation challenges and interim solutions.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

0xdade

The Verilog to Verilog Decompiler

Explore hardware decompilation techniques to extract high-level functionality from integrated circuit netlists, drawing parallels with software decompilation for design recovery and hardware assurance.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Project Everest - Fast, Correct, and Secure Software for Deployment Now

Explore Project Everest's verified, high-performance secure communication components. Learn about F* programming, EverCrypt, EverParse, and EverQuic-transport, and their adoption in major projects.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

0xdade

Voight-Kampff for Email Addresses

Explore email address reputation analysis for identifying spear-phishing and fraud. Learn about EmailRep, a system using OSINT techniques to assess email risk and differentiate real users from attackers.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk