Welcome To The Conference! {Held in theater}

Command Senior Enlisted Leader, USCYBERCOM
Senior Enlisted Advisor, NSA/CSS
Speaker Biography
{Held in theater}

Johnny Xmas is here to “reveal the magicians’ secrets on all of the “low-hanging fruit” penetration testers and hackers used to compromise your enterprises in 2023. This will be a detailed discussion about how and why the attacks work, and what steps you can take to proactively defend against them. Participants will walk away with highly-actionable tasks to immediately take to work on Monday to not only bump their company security posture up a distinctive notch with little to no hit to their budgets but also inherently render future penetration tests more cost-effective by eliminating potential “cheap shots” pentesters love to take.

Evading detection by modern AV & EDR can seem daunting and near impossible to the uninitiated. If the idea of trying to get a payload past these defenses seems unattainable and too “l337,” then this talk is for you! I’ll cover some basic concepts and tools you can use to start evading detection and get your payloads running. To the initiated, this is a 101-level talk, but who knows, you might learn a new trick along the way!

This talk will tell the story of how I found vulnerabilities in the web infrastructure of OpenSea and other crypto companies through malicious NFTs.

More specifically, I found server-side request forgeries in infrastructure that was parsing ERC721 (NFT) smart contracts which earned me more than $310k+ in bounties within a month

BBOT is a new open-source OSINT tool created at Black Lantern Security, by pentesters for pentesters. BBOT is being tested and improved continually. Hear from the main author of the tool and witness some live demos!

Renee will share her journey from writing environmental policy to serving as the NASA Chief Information Officer.

How do you stop a jailbroken, autonomous tractor? This presentation will demonstrate (live) how hacking your connected farm equipment can be good, bad, but most of all, innovative. I will show the risks & rewards of modifying precision agriculture equipment for modern farms. This presentation will answer: how to hack your tractor, the risks of jailbreaking farm equipment, but also the benefits. If you're wondering how or why someone would hack their tractor, combine, harvester, then this presentation is for you. As a hacker, I want to show you the possibilities of farm hacking, and also inspire you to make your own advancements in agricultural automation.

What if I told you there are protocols other than TCP and UDP? And what if I told you not everything is a web app or an app app or a Windows deployment? Mobile networks are built on layers and layers of protocols most people have never heard of and contain dozens of logical entities no one can clearly define.

Detecting anomalous behavior in this environment is a challenging task. Most vendors assume the entirety of mobile network equipment is secure by definition but new deployment architectures have the potential to increase the attack surface of traditional networks.

This talk will illustrate how Range Networks and AMN build systems to monitor our unique cellular infrastructure architecture. As we only have limited views into the deep core of each carrier network, the lessons we've learned can be applied to any system with compartmentalized access and inherent trust."

When you walk down city streets, through the hallways of office buildings, or ride an elevator up to your hotel room... what do you see? Most of us simply see the world as we're expected to: Stores that are open or closed. Institutions that have a main entrance we're expected to use. Doors and floors that are only accessible to us if we are credentialed and authorized to be there.

That is not the world that I see. I am a professional thief.

My name is Deviant and I run covert entry operations with a team of similarly-trained experts. We break into buildings -- picking locks, bypassing alarms, attacking the access control systems -- and report our findings to clients around the world. In this talk, I will discuss all of the glaring and extreme security vulnerabilities that I see when i wander through the world. The facade of false security is paper thin, and I invite you to look behind it and see how many things are not as secure as we are meant to believe.

After looking at some of my evidence and listening to stories from my time in the field, maybe you'll start see the world as I do.