AVAILABLE: SECKC SPONSORSHIP

WHEN: Tuesday, January 9th, 2018 from 6:00 PM to 9:30 PM (CST)
WHERE: Kanza Hall - 7300 W 119th St. Overland Park, KS 66213

7:00 - OWASP SAMM and other Software Security Assurance Frameworks

August Johnson

Software is cruddy. These tools help to make it better. This will be a review of various software security assurance tools, and a more in-depth look at the OWASP SAMM, what you can adopt, and how it can benefit coders, and really, anyone who uses the software.

8:00 - 10 min - BLE scanning with BLE Scanner

rsaxvc [rsaxvc.net]

I'll show off a simple tool fr BLE hacking on the go, and own a few willing participants devices.

Attacking Active D - A Hacking Series

Ryan Preston [@h3xg4m3s]

This will be the first in a series of talks explaining and demonstrating modern attacks on Active Directory. During this presentation I will further cover Powershell Empire, picking up after davehull's presentation, and its functionality to a pentester. This will set the stage for the next few talks where we will learn about crackmapexec, responder, ntlmrelayx, Inveigh, and Bloodhound. Finally we will explore new tools that put all this together like DeathStar, AngryPuppy, Dogspawn, and GoFetch that automate domain takeovers.

Why (and how) we phish our users and why you should too

Julie Fugett & Shane Fonyi

After a phishing incident that resulted in direct deposit theft, we realized we needed to take a more aggressive approach to educating our users about social engineering and phishing. With the expenditure of some political capital and a cash outlay of less than $10, here's how and why we did it.

https://www.eventbrite.com/e/seckc-january-2018-tickets-37359541394