CrikeyCon IX

Flipper Zero with a side of Hotel Access Cards

Presenter: David Robinson (Karit)

Time: 10:30 - 12:30 (2hrs)

This talk/workshop is in two parts. There will be a presentation part looking at hotel access cards and what the Flipper Zero can do with them. There have been many talks on building access cards, but not so much about hotel access cards. This talk will look at the similarities and differences of building access cards and hotel access.
Once the presentation portion is complete, the floor will be open to discuss what people are up to with their Flipper Zeros and answer people’s questions about the Flipper Zero so they can get the most out.

Sign Up - Closed

Red Teaming the Software Supply Chain

Presenter: Paul McCarty (6mile)

Time: 13:30 - 17:30 (4hrs)

The purpose of this workshop is to learn about the security posture of a specific software supply chain (SSC) by testing it via focused red-teaming activities. A big part of this workshop is learning how software is created by identifying how a target writes, builds and deploys its applications.
We will go through the different stages of the SSC and talk about the different security controls that exist at each stage. From that insight will come an understanding of the weaknesses and attack vectors available against that target. We will also spend some time talking about recent attacks and how malicious actors are evolving their techniques.
Participants will come away from this workshop with an understanding of how broad the software supply chain is, what security controls exist, and how to test if those controls are present.

Sign Up - Closed

Playbook Development 101: A Guide for Newbies

Presenter: Gyle dela Cruz (GyledC)

Time: 13:30 - 17:30 (4hrs)

If you are new to a SOC role or you've been asked by your manager to create an IR playbook but you are wondering how to start, consider signing up for this workshop. This workshop is designed to equip participants who are just starting their SOC or IR career paths with the knowledge to develop effective Incident Response (IR) playbooks based on best practices and industry standards (NIST and MITRE ATT&CK framework).
You will learn how to identify and assess potential security incidents and create structured playbooks that outline step-by-step actions to be taken during different incident scenarios.
You will be provided a sample incident response plan as part of the pre-class activities which will help with the hands-on exercises during the workshop.

Sign Up - Closed

Introduction to Code Review (Including discussion on CVE)

Presenter: Louis Nyffenegger (snyff)

Time: 13:30 - 16:30 (2-3hrs)

Join us for a workshop designed to improve your security code review skills! Ideal for developers, pentesters, security professionals, and anyone involved in the software development lifecycle, this session offers a comprehensive overview of the principles and practices of effective security code review.
After a brief introduction, we will delve into various code review techniques. Next, we will explore interesting patterns that you can apply to any codebase you're reviewing. Finally, we'll jump headfirst into the analysis of CVEs! We've handpicked a few vulnerabilities that will knock your socks off (don't worry, we will bring spare socks).
Whether you're aiming to refine your code review skills, enhance the security of your projects, or simply learn some cool tricks, this workshop is for you! There Be Dragons^WGoodies!!

Sign Up - Closed

Leading the Cyber Squad: A perspective on leadership and building your cyber dream team

Presenter: JP Haywood (JP)

Time: 10:00 - 12:30 (2.5hrs)

Join JP as he walks through building as successful cyber security team. JP will share his leadership story, including mistakes he made along the way, before diving into learning simple strategies to become an effective leader. Participants will leave with actionable insights they can take back to their own teams. This workshop is hands on and suitable for current and aspiring leaders.

Sign Up - Closed

RF hacking basics & how to use your cool gadgets

Presenter: Amy Nightingale

Time: 10:30 - 12:00 (1.5hrs)

NOTE: This is a talk that is being run in the workshop area, no equipment is required.
Ever wondered why your internet always cuts off just before dinner time or how your Flipper is able to open garage doors?
Radios are everywhere, and RF technology is applied in places that you might not even have thought of, and this usage is only going to grow. Come learn how basic Radio technology works, what you can transmit and receive, as well as the legalities you need to keep in mind before blasting the entire CBD with RF interference (hint: don't).
As a bonus, you'll learn about bunch of cool gadgets that you may have to dig up out of the bottom of your drawer or even inspire your next revolutionary project idea! I'll be doing a couple of live demos.

Sign Up - Closed