PasswordsCon·51 min
Mackenzie Jackson
Shows how hardcoded API keys and credentials end up inside Android and iOS apps, and how to find them.
mobileandroidvulnerabilities+2
PasswordsCon BSidesLV 2023
Las Vegas, USA · August 2023 · 9 talks
PasswordsCon talks from BSides Las Vegas 2023.
Filters+
1–9 of 9 talks
PasswordsCon·34 min
Aldo Salas
Shows how flaws in passwordless WebAuthn logins can enable account takeover, plus fixes for developers and testers.
identitywebvulnerabilities+2
PasswordsCon·52 min
Dwayne McDaniel
Presents research on hardcoded credential leaks in public GitHub and a five-level maturity model for secret management.
appseccodedetection+2
PasswordsCon·44 min
Tom Pohl
Shows how office printers leak stored credentials that can be used to move deeper into a corporate network.
devicenetworkattack+2
PasswordsCon·21 min
Susan Paskey
Explains where stolen passwords from malware dumps come from, how to triage them, and how to respond when accounts appear.
incident-responseidentitymalware-analysis+2
PasswordsCon·54 min
Matt Weir
Examines authentication problems in clinical settings, from shared infusion pump keys to hardcoded service codes.
healthcareidentitydevice+2
PasswordsCon·44 min
Derek Melber
Explains how Active Directory and Entra ID password policies actually apply, and how weak passwords get attacked and cracked.
windowsidentityattack+2
PasswordsCon·51 min
Mackenzie Jackson
Shows how attackers find and exploit leaked credentials in git repositories, container images and mobile apps.
secretsattackcontainer+2
PasswordsCon·53 min
Rick van Galen · James Griffin
Explains how a password manager can derive its decryption key from SSO sign-ins or passkeys, and the design changes that requires.
identitytrustdevice+2