Talks

A satirical late-night con: AI writes every talk submission and runs the review committee, and humans get on stage to present whatever it came up with. “AI generated, human presented.”

The second run of the workshop, with upgraded attack paths and labs and new gMSA content. On the red side: Pass the Hash, ADCS abuse, golden tickets and DLL hijacking. On the blue side: catching each one with Sigma and Yara rules and ELK.

An hour-long run of the SecTalks talk, in the closing slot of TuskCon, a weekend hacker con held at a beachside campground on the Sunshine Coast. It covered how Salesforce Lightning sites, built on the Aura framework, differ from typical web apps, and how to audit them for security issues.

A four-hour hands-on workshop. Attendees attacked a Windows domain with tools like BloodHound and Mimikatz, then wrote Sigma and Yara detections for the same attacks, to show why red and blue teams get the best results working together.

Salesforce Lightning sites are built on the Aura framework and behave differently from a typical web app, which brings its own set of security challenges. This talk covered how to audit them.