DEFCON-CICD-pipelines-workshop

CI/CD : The new Eldorado ? Abstract CI/CD pipelines are increasingly becoming part of the standard infrastructure within dev teams, with the rise of new approaches such as Infrastructure as Code, the sensitivity level of such pipelines is escalating quickly. In case of compromise, it is not just...

Lsass-Shtinkering

Lsass Shtinkering Nuevo método de volcado de LSASS abusando del servicio Windows Error Reporting. Envía un mensaje al servicio mediante el protocolo ALPC para informar de una excepción en LSASS. Este informe hará que el servicio vuelque la memoria de LSASS. Requisitos previos El valor del registr...

Playing Doom on a John Deere tractor with Sick Codes: Lock and Code S03E18

In 1993, the video game developers at id Software released Doom, a first-person shooter that placed a nameless protagonist into the fiery depths of hell, equipped with an arsenal of weapons to mow down imps, demons, lost souls, and the intimidating "Barons of Hell." In 2022, the hacker Sick Codes...