BSidesSLC 2020
| title | author | length |
|---|---|---|
| Opening Remarks, Rumblings, Ruminations, and Rants | Bryce Kunz | 45m |
Claims that COVID-driven remote work forces rapid VPN and zero-trust adoption, recommends host-based firewalls blocking SMB/445 and device attestation, cites… | ||
| Where's my dough?! A look at web skimming attacks on | Siddharth Coontoor | 33m |
Title: Where's my dough?! A look at web skimming attacks on e-commerce websites
Presenter: Siddharth Coontoor | ||
| Cloud-Based Contextual Analysis as Code | Erkang Zheng | 21m |
Builds a cloud-native graph CMDB (Jupiter 1 / any graph DB like neo4j) that maps users, accounts, IAM roles, security groups, VPCs and S3 buckets and runs… | ||
| Rendering Ransomware Detection and EDR Products Blind | Rene Kolga | 29m |
Describes a concrete evasion called replace that uses DefineDosDevice to pass a symlink and cause the driver to return error code 33, making the operation… | ||
| A Chain Is No Stronger Than Its Weakest LNK | David French | 31m |
Describes how Windows .lnk files are abused for initial access, persistence and credential harvesting, and which file fields actually reveal misuse: target… | ||
| WiFi Pineapple Active Detection via a Raspberry Pi Zero | Jason Bertman | 23m |
Build uses a Raspberry Pi Zero W running a modified Kali NetHunter kernel and simple iw tools to actively detect WiFi Pineapple-class devices. Detection logic… | ||
| How to Use Code Signing to Protect your Critical Software | Eddie Glenn | 28m |
Maersk’s NotPetya chain shows supply‑chain risk: Link OS compromise lets malware spread to 4,000 servers and 45,000 PCs, costing ~$300M internally and an… | ||
| Badge Talk | Waylon Grange | 25m |
A flexible PCB wristband becomes a functioning ePaper watch with a text adventure, USB mass storage and NFC time set built around a 32 bit STM MCU using almost… | ||
| It Is The Year 200, We Are Robots | Will Pearce | 32m |
Claim: offensive machine learning automates and scales phishing ops using real tools and measurable rates. Projects include op bot, an RL tool for privilege… | ||
| BOLA, IDOR, MA, BFLA. Welcome to the OWASP API Top 10! | Adam Fisher | 30m |
OWASP’s API Top 10 focuses on concrete failures: Broken Object Level Authorization lets an authenticated account enumerate IDs and retrieve roughly 2 million… | ||
| The Domain Password Audit Tool | Carrie Roberts, Darin Roberts, Cameron Roberts | 30m |
Domain Password Audit Tool automates converting an exported NTDS.dit with secretsdump into user records, feeds hashes to crackers like hashcat or John the… | ||
| From Mattress sales to Infosec soldier | Chriss Hansen | 28m |
Starts from mattress-sales work with 60–70 hour weeks and uses the downtime to binge conference talks, YouTube channels (DC-CyberSec, The Cyber Mentor)… | ||
| $how Me the Money! (Getting Business Buy-in) | Carlota Sage | 32m |
Provides two practical worksheets: a productivity/case-deflection ROI sheet that converts help‑desk time and provisioning labor into dollars and a risk &… | ||
| How Can I Get Started in Cybersecurity? | Dale Rowe | 26m |
Shares a curated resource Google Doc and claims there are 4 million unfilled positions in cybersecurity today, then lays out five practical steps: pick a… | ||
| MineMeld - there's gold in them thar hills! | Jason Reverri (nibb13) | 27m |
MineMeld ingests diverse threat feeds, normalizes and deduplicates them, and exposes ready-to-ingest outputs so security controls can consume fewer, cleaner… | ||
| Jumpstarting Your Appsec Program | Julia Knecht, Jacob Lords | 33m |
Defines appsec as helping engineering write defensible code and release trustworthy software, and recommends starting with company goals, customers and… | ||
| SSH Keys: Security Asset or Liability? | Bart Lenaerts | 27m |
SSH key usage scales into a security problem: surveys report 61% of organizations let users self-manage authorized_keys and Palo Alto finds 76% of clouds… | ||
| Closing Remarks, Rumblings, Ruminations, and Rants | Bryce Kunz | 09m |
Virtual conference thrown together in about a week with badges, swag and plans to honor 2020 ticket holders at the 2021 event, organized now as a 501c3… | ||
| nothing matches | ||