~/talks

Philip Tsukerman

what they talk about

where they keep going back

no series more than once — all 4 in the filters

on a stage with

who talks about the same things

nobody close enough yet

titleconferencedate
LPEPM - Tricking Microsoft EPM To Do Our BiddingNullcon Berlin 20252025-09-04
Workable local privilege escalation against Microsoft EPM that turns any allowed rule into an admin execution by exploiting a double-fetch TOCTOU in the…
Talk on
"Sneaking Past Device Guard"CONFidence 20192019-06-03
Claims multiple practical WDAC/Device Guard bypasses: some require admin, several abuse Microsoft Office without user clicks, and one works from low privilege…
Talk on
Sneaking Past Device GuardHITBSecConf 2019 Amsterdam2019-05-06
Shows concrete Device Guard bypasses that actually run unsigned code: a trusted-location registry write that makes Office run macros with no user action, an…
Talk on
D2T1 - Expanding Your WMI Lateral Movement ArsenalHack In The Box Amsterdam 20182018-04-09
Demonstrates concrete WMI lateral techniques that avoid Win32_Process create and beat common network IDS by changing execution vectors: class derivation to…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.