Talks·1 hr 16 min
Heidi · Bruce
Organizers share how ShmooCon is planned, staffed, funded, and ticketed, with lessons from running a volunteer conference.
lessons-learnedmanagementteam+2
Talks ShmooCon 2023
Washington, DC, USA · January 2023 · 45 talks
Talks from ShmooCon 2023.
1–24 of 45 talks
Talks·39 min
Travis Goodspeed
Shows how photographing and chemically delayering mask ROM chips lets their stored bits be extracted with a Qt6 tool.
hardwarereverse-engineeringopen-source+2
Talks·49 min
Brian Butterly
Surveys security concerns across railway systems, from the operational technology that runs them to the threats their operators face.
icsinfrastructurethreat+1
Talks·18 min
Libby Liu
Explores the risks and barriers faced by technology company insiders who report wrongdoing to outside parties.
socialtrustrisk+2
Talks·16 min
Christopher Hewitt
Walks through glitching a microcontroller's flash protection to recover a locked chip's ID code and dump its firmware.
hardwareembeddedreverse-engineering+3
Talks·48 min
Tracy Mosley
Traces cellular networks from 1G analog phones through 5G, covering each generation's core architecture and public attack vectors.
networkinfrastructureattack+2
Talks·50 min
Jay Beale
Shows how Kubernetes workload identity tools for AWS fail once a single node is compromised, with live demos.
kubernetescloudidentity+2
Talks·50 min
Kasimir Schulz
Explains a Python tarfile path traversal flaw and the large-scale GitHub scanning and patching effort it triggered.
open-sourcevulnerabilitiessupply-chain+2
Talks·21 min
Jonathan Fischer
Demonstrates an open-source keyboard implant that uses mesh radio for remote control, reverse shells, and file exfiltration.
hardwareattackdevice+3
Talks·21 min
Harley Geiger
Covers the legal questions that hackers and security researchers commonly face in their work.
risktrusthack
Talks·48 min
Gal Zror
Shows how a layer 2 PPPoE logging overflow let the researcher take root on an ISP's broadband access server.
vulnerability-researchembeddedexploitation+2
Talks·21 min
Gabriel Landau · Mark Mager
Shows how a kernel driver keeps LSASS memory from lingering in physical RAM to thwart credential dumping.
windowsmemorydefensive-security+2
Talks·40 min
Patricia Bailey
Explains how a covert Russia-linked disinformation operation gets its messaging past censorship barriers.
intelligencethreatstate+1
Talks·22 min
Carson Zimmerman
Gives SOC teams seven practical process changes to reduce alert fatigue, improve hunting, and make response work sustainable.
security-operationsincident-responsedetection+2
Talks·19 min
Paul Syverson
Covers the subject of Sauteed Onion as presented at ShmooCon 2023.
privacynetworkinfrastructure
Talks·30 min
Joe Oney
Shows how honey credentials on external phishing pages let defenders watch attackers, gather intelligence, and add friction.
threat-detectionincident-responseintelligence+1
Talks·34 min
Omer Tsarfati
Explores vulnerable drivers shipped with peripheral devices and the risks they create for the systems that load them.
vulnerability-researchwindowskernel+3
Talks·49 min
Joshua Bailey · Robert Barr · Amanda Lee · Jonah Schimpf
Shows how firmware binaries can be split back into object files, then unlinked, decompiled and patched.
reverse-engineeringembeddedmachine-learning+2
Talks·39 min
Jonathan Fuller
Shows how command-and-control servers can be infiltrated and monitored at large scale.
threatintelligenceinfrastructure+1
Talks·43 min
Brandon DeVault
Shows how to hunt for malicious Windows scheduled tasks that already exist on endpoints, using PowerShell and an Elastic dashboard.
windowsthreat-detectionhunting+1
Talks·44 min
Jan Nunez · Jay Smith
Shows how flipping 3270 field attribute bits exposes protected and hidden fields in CICS mainframe applications.
mainframevulnerabilitiesapplication+2
Talks·44 min
Jason Baird
Shows how a small handheld device can reveal whether a wall jack connects to a live switch and what power it offers.
networkhardwaredevice+2
Talks·49 min
Closes the conference by asking which security approaches are actually working and what to try next.
discussionlessons-learnedrisk+1