Talks·49 min
Jennifer Shannon
Walks through hands-on pentesting of a deliberately vulnerable API, showing authorization, mass assignment and injection flaws.
webvulnerabilitiesidentity+2
Talks RVAsec 13
Richmond, VA, USA · June 2024 · 29 talks
Talks from RVAsec 13 (2024).
1–24 of 29 talks
Talks·53 min
Luke McOmie
Shows buyers how to compare security service bids and deliverables so a penetration test delivers real value.
riskmanagementlessons-learned+1
Talks·48 min
Jimi Sebree · Evan Grant
Surveys years of consumer router and ISP device flaws, showing repeated bug classes and tangled vendor supply chains behind them.
iotvulnerability-researchdevice+2
Talks·49 min
Tucker Mahan
Explores how generative AI media fuels deepfake fraud and voice phishing, and how staff can learn to spot it.
aisocialphishing+2
Talks·41 min
Corey Brennan
Shows how a personal hacker grimoire and documentation habits can help security professionals counter impostor syndrome.
lessons-learnedlearningteam+1
Talks·41 min
Ali Ahmad
Explains how fuzzing Oracle Outside In file parsers used by Exchange surfaced memory corruption bugs.
vulnerability-researchfuzzingwindows+2
Talks·34 min
Ross Merritt
Teaches improv comedy exercises that build quick thinking, clear communication and composure for social engineering work.
sociallearningpractical+1
Talks·52 min
Ariyan Suroosh
Walks through planning and carrying out physical penetration tests, from reconnaissance and pretexting to badge cloning.
attackpracticaldevice+2
Talks·1 hr
Caleb Sima
Explores how AI could close the coverage, context and communication gaps behind security leaders' recurring problems.
aimanagementsecurity-operations+1
Talks·32 min
Kymberlee Price
Examines why small and medium businesses struggle with security tooling and argues vendors should build secure-by-default products.
ransomwareriskmanagement+2
Talks·39 min
Aqeel Yaseen
Introduces mindfulness as a way to handle stress and burnout in security work, with a short guided practice.
lessons-learnedmanagementlearning+1
Talks·47 min
David J. Bianco
Argues that defenders can shape attacker behavior using the Pyramid of Pain and deception rather than accepting the Defender's Dilemma.
threat-detectiondefensive-securitythreat+1
Talks·45 min
Ell Marquez
Uses Brothers Grimm fairy tales to reframe advanced persistent threats as patient, people-driven attacks and social engineering.
threatphishingattack+2
Talks·51 min
Kevin Johnson
Shares real pentest stories on flawed web apps, captive portals, physical intrusion and phishing, and how to communicate risk.
webapplicationlessons-learned+2
Talks·50 min
Caleb Gross · Josh Shomo
Shows how an LLM can rank changed functions in a patch diff to locate the code that fixes a disclosed vulnerability.
aivulnerability-researchreverse-engineering+2
Talks·41 min
Qasim Ijaz
Shows defenders how honeypots, decoy accounts and tripwires can slow attackers and reveal their activity inside Windows networks.
defensive-securitythreat-detectionwindows+2
Talks·49 min
Ben Haynes
Compares EPSS and CVSS scoring and proposes a transparent method for ranking which vulnerabilities to fix first.
vulnerabilitiesriskintelligence+2
Talks·52 min
Sam Panicker
Shows how to run open-source language models locally and connect them to personal notes for a private AI chat setup.
aimachine-learningopen-source+2
Talks·42 min
Micah Parks
Shows how a curious user reverse engineers an Android game, a product waitlist, and a pub/sub system to find design flaws.
reverse-engineeringmobileappsec+2
Talks·39 min
Evan Booth
Surveys generative AI tools and shows how a CTF design team used them for game dialogue, art and voice.
aimachine-learningbuilding+2
Talks·50 min
AM Grobelny
Walks attendees through a live AWS incident response exercise, from isolating compromised instances to blocking an attack path.
cloudincident-responselessons-learned+2
Talks·41 min
David Girvin
Explains how security tools are bought and sold, and where buyers and sellers commonly go wrong.
managementlessons-learnedrisk+1
Talks·43 min
Nick Copi
Shows how a public V8 type confusion bug was turned into working remote code execution in an Electron renderer.
vulnerability-researchexploitationmemory+2
Talks·44 min
Darryl MacLeod
Shows how governance, risk and compliance teams can support offensive security through prioritization, policy alignment and shared communication.
riskmanagementteam+2