I will discuss how to carry out phone pretexting calls for engagements, including how to begin reconnaissance, how to build a scenario, preparing for...

The Internet accessible single-factor attack surface is decreasing with the increased implementation of multi-factor. However, configuration of multi...

Present methods for potential detection of ScareCrow EDR Bypass payloads. Present pending work with EDR products, memory forensics, and share other...

In this talk, I will introduce the concepts of web scraping, how they apply to paste sites, and specific tools that I have used to gather data...

Many web applications use email as a mechanism for user verification, password resets, real time notifications and much more. But security testers and...

For the past two years, we have been facilitating purple team exercises for our clients using a framework that we developed that simulates insider...

The emergence of IoT (Internet of Things) and mobile devices has multiplied in the past five years. In this 30 minute presentation, the impact of this...

The talk will highlight some of the common mistakes made by developers while coding mobile applications and how attackers can exploit them. We will...

As enterprises modernize their wireless technology, new attacks have developed on the horizon. The presentation will cover WiFi terminology, various...

With a heavy focus on monitoring, host based detection and attack prevention, much of a legacy attack surface still remains. MitM attacks utilizing...

With the adoption of cloud infrastructure rapidly changing our attack landscape, we find ourselves with SOC and IR teams asking for some of the same...