Proving Ground·24 min
PG
Shows how a malicious Skyrim mod, triggered by an in-game item, can open a reverse shell and grow into a C2 beacon.
attackmalware-analysisexploitation+2
Proving Ground BSidesLV 2024
Las Vegas, USA · August 2024 · 16 talks
Proving Ground talks from BSides Las Vegas 2024.
1–16 of 16 talks
Proving Ground·25 min
Craig Lester
Explains how airline fares, ticketing and revenue management work, and where their pricing logic can be abused.
vulnerabilitiesriskattack+1
Proving Ground·23 min
Larissa Fonseca
Shows how community-shared jailbreak prompts can push a public chatbot into helping build a keylogger and phishing lure.
aimachine-learningattack+2
Proving Ground·20 min
Eiji Mori · Norihide Saito
Shows how trusting the HTTP Content-Type from object storage uploads enables XSS and validation bypasses in real products.
webappsecvulnerabilities+2
Proving Ground·19 min
George Wang
Walks through a low-cost audit logging stack built on OpenSearch, with build-versus-buy tradeoffs and cost and performance tuning.
security-operationsmonitoringbuilding+2
Proving Ground·26 min
Mário Leitão-Teixeira
Examines what CVSS v4 changes in its scoring and where the standard still falls short for vulnerability risk management.
riskvulnerabilitiesopen-source+2
Proving Ground·19 min
Krity Kharbanda · Harini Ramprasad
Explains how software bill of materials help teams track dependencies, find vulnerable components and manage supply chain risk.
supply-chainopen-sourcevulnerabilities+2
Proving Ground·24 min
Charissa Kim
Walks through SOC 2 compliance, its audit timeline and costs, and where the framework falls short for startups.
riskmanagementtrust+2
Proving Ground·19 min
Carrie Randolph
Explains how trust is built quickly and applied in social operations, sales, staff management and executive support.
socialengineeringtrust+2
Proving Ground·23 min
Carlos Gonçalves
Explains how threat intelligence guides adversary simulation to prioritize techniques and improve detection in a bank's purple team.
intelligenceattackdetection+2
Proving Ground·21 min
Shows how a simple misconfiguration can break TPM full disk encryption.
trustdevicesystem+2
Proving Ground·23 min
Paul Wortman
Shows how a D-Bus based Python tool enumerates nearby Bluetooth Low Energy devices and probes their GATT services.
devicetoolrecon+2
Proving Ground·26 min
Michelle Eggers
Explains why mainframes persist in banking and government, then walks through common weaknesses and hardening steps.
vulnerabilitiesinfrastructurerisk+1
Proving Ground·29 min
Troy Bowman
Explains how security teams can run threat modeling across large organizations by streamlining intake, collaboration, and handoffs.
appsecthreatrisk+2
Proving Ground·26 min
Jason Odoom
Introduces Nix and Flakes as a way to get reproducible, isolated development environments with pinned dependencies.
developmentdeveloperbuild+2
Proving Ground·25 min
Randall Wyatt
Offers career guidance for neurodivergent people in infosec, covering job hunts, interviews, accommodations and self-advocacy.
careerinterviewmanagement+2