Hack In Paris 2019
| title | author | length |
|---|---|---|
| Social Forensication: A Multidisciplinary Approach to Successful Social Engineering | J.Gray | 43m |
Two-pronged attack: collect a full RAM image with FTK Imager Lite and analyze with Volatility to extract hashes, creds (Mimikatz), net connections and certs… | ||
| Cracking the Perimeter with SharpShooter | D. Chell | 42m |
Open-source SharpShooter generates staged and stateless Windows payloads (HDA, JS, VBS, VBA, Excel4) using dotnet-to-JScript serialization, RC4/base64/zip… | ||
| DPAPI and DPAPI-NG Decrypting All Users’ Secrets and PFX Passwords | P. Januskiewicz | 54m |
Claims two new, practical attacks: possession of a backup key LSA Secret on DC (the private key matching the domain backup public key) lets an attacker decrypt… | ||
| whoami priv - show me your privileges and I will lead you to SYSTEM | A. Pierini | 44m |
Detailed walkthrough of which Windows privileges actually lead to SYSTEM: SeImpersonate, SeAssignPrimary, SeDebugPrivilege, and SeRestorePrivilege are shown… | ||
| Introduction to IoT Reverse Engineering | V. Di Giampietro | 40m |
Hands-on firmware reverse engineering of a D‑Link router with firmware from ADB: identifies an ARM Cortex‑A9 1GHz, 256MB RAM, 256MB NAND device, extracts JFFS2… | ||
| Who watches the watchmen? | M. Bergman, M. Smeets | 38m |
A new version of RedELK centralizes logs from dozens of C2 servers, gives one‑click overviews of IOCs, full‑text keystroke search and alerts when samples hit… | ||
| BMS is destroyed by "smart button" | E. Litvinov | 26m |
Claim: a device attached to KNX twisted pair — for example an ESP32 or a cheap serial transceiver — gives full field-side access allowing replay and DoS… | ||
| HACKER JEOPARDY | Winn Schwartau | 01h 24m |
Live Hacker Jeopardy runs as a pub-style quiz where teams answer security clues, buzz in, and drink-for-points—beers finished are literally converted into… | ||
| All your GPS Trackers belong to US | C. Kasmi, P. Barre | 36m |
Bought ten popular consumer trackers and received seven for testing; set up a BladeRF base-station inside a Faraday cage to sniff GPRS and SMS… | ||
| Exploits in Wetware | R. Sell | 38m |
Third-place finishes at the Defcon Social Engineering CTF (2017, 2018) back up a claim: OSINT plus vishing easily harvests sensitive enterprise data. Passive… | ||
| You « try » to detect mimikatz | V. Le Toux | 45m |
Mimikatz extracts plaintext creds by dumping LSA and process memory and can create golden tickets to impersonate any domain account; demos show driver… | ||
| IronPython... OMFG | M. Salvati | 49m |
Claims that any PowerShell tradecraft can run via .NET scripting languages without touching disk, implemented by embedding engines in PowerShell and using… | ||
| Sneaking Past Device Guard | P. Tsukerman | 43m |
Claims a set of practical WDAC/Device Guard bypasses that let unsigned code run without toggling the feature, with some techniques needing admin and others… | ||
| Using Machines to exploit Machines | G. Barnhart Magen, E. Caltum | 45m |
Claims an ML pipeline that triages fuzzing crashes faster and more accurately than the heuristic tool exploitable, using features extracted from crash state… | ||
| Abusing Google Play Billing for fun and unlimited credits! | G. Lopes | 34m |
Demonstrates that Google Play Billing allows local validation bypasses by reverse engineering real games Fruit Ninja, Doodle Jump and Snoopy Pop, using Apktool… | ||
| RHme3 Hacking through failure | B. Gardiner, J. Beverley, C. Dewinter | 36m |
Four-month RHme3 CTF entry against ~500 teams yields 17 flags and a third-place finish after repeated dead-ends: built a side-channel rig around a PicoScope… | ||
| In NTDLL I Trust - Process Reimaging and Endpoint Security Solution Bypass | E. Carroll | 40m |
Claim: Process Reimaging lets an attacker with code execution make the OS report the wrong backing EXE by renaming file path, so Defender and many AVs query… | ||
| nothing matches | ||