ShmooCon Talks & Presentations

0xdade

The Verilog to Verilog Decompiler

1 review

Explore hardware decompilation techniques to extract high-level functionality from integrated circuit netlists, drawing parallels with software decompilation for design recovery and hardware assurance.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Security Response Survival Skills

1 review

Strategies for managing human factors during security incidents, focusing on psychological responses, effective communication, and team leadership in high-stress situations.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

0xdade

Process Control Through Counterfeit Comms - Using and Abusing Built-In Functionality to Own a PLC

1 review

Explore vulnerabilities in PLCs, learn discovery methods, and see how minor flaws can lead to device takeover. Gain insights into industrial control system security and potential exploits.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Javascript Deobfuscation

Learn techniques to decode obfuscated JavaScript, enhancing your ability to analyze and understand potentially malicious code for improved web security and threat detection.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Media Hype and Hacks that Never Happened

Explore sensationalized media coverage of cybersecurity incidents, debunking exaggerated claims and examining the reality behind reported hacks and threats.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

More Than One Way to Skin a Cat - Identifying Multiple Paths to Compromise Through the Use of Attach Graph Analysis

Explore attack graph analysis to identify multiple vulnerabilities and compromise paths. Learn about tools, techniques, and considerations for effective security assessment and risk mitigation.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Extending Information Security Methodologies for Personal User in Protecting PII

Explore methodologies for safeguarding personal information, focusing on asset identification, data classification, and vulnerability assessment to enhance individual privacy protection.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Intro To Bro

Learn about Bro, a powerful network security monitoring tool. Explore its features, capabilities, and applications in enhancing network defense and threat detection.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Resurrection of Ettercap - Easy-Creds, Lazarus & Assimilation

Learn about the revival of Ettercap, exploring easy-creds, Lazarus, and Assimilation techniques for network security testing and penetration testing.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

0xdade

Chip Decapping on a Budget

Learn DIY integrated circuit decapping techniques to reveal hidden chip designs using budget-friendly methods. Explore mechanical and chemical removal processes, laser cutting, and more.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

0xdade

Adventures in Hardware Hacking or Building Expensive Tools on a Budget

Explore hardware hacking techniques like CT scanning and chip decapping for non-destructive device analysis, circuit reconstruction, and vulnerability identification in embedded systems and access control.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

0xdade

Whitelisting LD PRELOAD for Fun and No Profit

Explore LD_PRELOAD process injection, its audit system, and whitelisting challenges. Learn about built-in protection vs. bolt-on solutions for Linux security.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

0xdade

5G Protocol Vulnerabilities and Exploits

Explore 5G protocol vulnerabilities and exploits, analyzing real traffic captures to uncover potential security issues in pre-authentication messages and discuss implications for mobile network security.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

0xdade

Real World Zero Trust Implementation

Practical insights on implementing Zero Trust security in a cloud-based, remote work environment. Covers challenges, solutions, and lessons learned from real-world experience.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Command and KubeCTL - Real-World Kubernetes Security for Pentesters

Explore Kubernetes security challenges, attack techniques, and practical advice for pentesters and security practitioners in containerized environments.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk