Truesec at DEF CON

Join Jayson for his training "Simulated Adversary - Tactics & Tools Training" to learn how adversaries attack in non-traditional ways. Two days covering all aspects of an engagement, starting with online research in a quick and efficient manner. Sound interesting?

In this presentation "Weaponizing Plain Text: ANSI Escape Sequences as a Forensic Nightmare", STÖK will explore how ANSI escape sequences can be used to inject, vandalize, and even weaponize log files of modern applications.

In the demo "Your Clocks Have Ears — Timing-Based Browser-Based Local Network Port Scanner", Donny will introduce a short primer on timing-based, browser-based port scanning using Fetch. He'll also discuss three techniques that can scan open ports on the localhost, a NAT router’s presence on the LAN, and open ports of the clients on the LAN. A demo of the proof of concept exploit will be provided, with closing remarks on possible mitigation strategies.