15th November 2024 Agenda
Registration Counter Opens
[KEYNOTE] The tomorrow threats, today
Len Noe, Transhuman | Cyborg Hacker | Technical Evangelist, CyberArk Software, Unites States
Len Noe
Transhuman | Cyborg Hacker | Technical EvangelistCyberArk Software
Unites States
Len Noe, a Technical Evangelist, White Hat Hacker, and Transhuman at CyberArk Software, is a dynamic and influential speaker on the international security circuit. With an impressive track record of delivering impactful presentations in over 60 countries and at renowned security conferences worldwide, Noe's expertise leaves a lasting impression. Notably, he has graced the stage at the prestigious World Conference in The Hague, C.E.R.T. EU, and has been invited to address multiple governments.
Len is the author of Human Hacked: My life and lessons as the worlds first augmented ethical hacker. With his first book Len exposes the subculture of Transhumans and the capabilities available to this new breed of human, along with the cyber security risks they pose.
Len is a co-host of the Cyber Cognition Podcast and a thought leader in the field of Transhumanism. With his upcoming book, he shares a captivating narrative of his personal evolution, solidifying his position as one of the world's foremost authorities in this transformative movement. As a futurist, Len's insights and expertise are highly sought after.
Len's passion for the Transhuman/Human+ movement is unparalleled, and he actively employs microchip implants to pioneer advancements in cyber security and enhance the human experience. His groundbreaking research has garnered global recognition, appearing in multiple global news outlets, while his regular appearances on top-tier security podcasts showcase his ongoing contributions to the field.
With a rich history as a Black/Grey Hat Hacker, Noe's extensive practical experience has shaped his skills. Over the course of 30 years, he has honed his expertise in web development, system engineering/administration, architecture, and coding. For the past ten years, Len has devoted his focus to information security from an attacker's perspective Actively engaging with the Texas information security communities and organizations like the Autism Society, Len continuously demonstrates his commitment to making a positive impact beyond the realm of technology.
Sessions
15-Nov-2024 09:45 - 10:15
[KEYNOTE] The tomorrow threats, today
Key Note 2
Behind the Plate: Uncovering Vulnerabilities in High security registration plate (HSRP)
Kartik Lalan, Sr. Security Engineer, PIC (Independent), India
Kartik Lalan
Sr. Security EngineerPIC (Independent)
India
Product Security Engineer @ Security Centre of Excellence – Philips Innovation Campus. He is M.Tech. in CS with Specialization in Information & Network Security. He conducts frequent talks and workshops on Info Sec topics @ several places including C0C0N, DEFCON BHV, Bsides Delhi & Bangalore Chapter, OWASP, Null A'bad & Bangalore Chapter, DroidCon-IN. Kartik loves to write technical Blogs in his leisure time.
Sessions
Workshop - 13th & 14th November 2024
Bypassing Enterprise Protection Solutions and Windows 11 OS Hardening Controls
15-Nov-2024 11.00 - 11.30
Behind the Plate: Uncovering Vulnerabilities in High security registration plate (HSRP)
[PANEL] Post-Quantum Security: Balancing Opportunities and Overcoming Challenges
[PANEL] The Pager Attack: A Wake-Up Call for Global Cyber Defense Strategies
PCI 4.0, Javascript Security for product security teams
Anand Kumar Ganesan, Lead Product Security Engineer, Poshmark, India
Anand Kumar Ganesan
Lead Product Security EngineerPoshmark
India
Anand Ganesan is the Lead Product Security Engineer at Poshmark, an e-commerce platform. He has a total of 9 years of experience in the security industry. He has been deeply engaged in driving all the product security efforts. This includes conducting threat modeling for various projects, executing penetration tests across diverse platforms, conducting source code analysis, prioritizing vulnerabilities based on severity, establishing content security policies from the ground up, assisting the compliance team during audits, and supporting them in assessing vendors from a product security perspective.
He is deeply passionate about continuously enhancing his skills and finds great satisfaction in overcoming and bypassing security implementations. Additionally, he also finds fulfillment in mentoring junior team members and guiding them to become proficient.
When he's not engaged in application security activities, he enjoys playing and watching cricket, socializing with friends, and catching up on movies.
Sessions
15-Nov-2024 16.00 - 16.30
PCI 4.0, Javascript Security for product security teams
Mohammad Arif, Senior Product Security Engineer, Poshmark, India
Mohammad Arif
Senior Product Security EngineerPoshmark
India
Mohd Arif holds the position of Senior Product Security Engineer at Poshmark, a prominent Ecommerce organization. With three years of experience in the security industry, he has established himself as a skilled practitioner in various domains. His expertise encompasses hacking web applications, mobile apps, API security testing, source code review, architecture review, and threat modeling.
His true passion lies in Cloud security, Hardware security, and IoT security. He derives immense satisfaction from discovering novel methods to bypass security mechanisms and enhancing his operational security (OPSEC) techniques.
He remains deeply committed to the field of cybersecurity and actively seeks opportunities to share his knowledge and experiences. As a result, he has been invited to speak at esteemed conferences and summits, including Seasides Conference, C0C0N Conference, and Redteam Summit. Notably, Mohd Arif has been an enthusiastic volunteer at India's beloved Seasides Conference, where he eagerly shares his hacking insights with a receptive audience.
When he's not immersed in breaking code and applications, you can find him taking delight in photography, playing video games, embarking on biking adventures on weekends, and having a knack for creating amusing memes.
Sessions
15-Nov-2024 16.00 - 16.30
PCI 4.0, Javascript Security for product security teams
Know your Enemies: Deep Dive into Ransomware Threat Groups
Niranjan Jayanand
Niranjan Jayanand
Niranjan has over 16 years experience working on tracking and reporting on eCrime Toolkits, APT campaigns and Ransomware attacks. His research publications were highlighted in multiple journals, conferences, reports, webinars and podcasts. He has reported on over 60 active early attack campaigns ahead of competitors and helped protect global customers.
Sessions
15-Nov-2024 16:30 - 17.00
Know your Enemies: Deep Dive into Ransomware Threat Groups
Registration Counter Opens
[KEYNOTE] The tomorrow threats, today
Len Noe, Transhuman | Cyborg Hacker | Technical Evangelist, CyberArk Software, Unites States
Len Noe
Transhuman | Cyborg Hacker | Technical EvangelistCyberArk Software
Unites States
Len Noe, a Technical Evangelist, White Hat Hacker, and Transhuman at CyberArk Software, is a dynamic and influential speaker on the international security circuit. With an impressive track record of delivering impactful presentations in over 60 countries and at renowned security conferences worldwide, Noe's expertise leaves a lasting impression. Notably, he has graced the stage at the prestigious World Conference in The Hague, C.E.R.T. EU, and has been invited to address multiple governments.
Len is the author of Human Hacked: My life and lessons as the worlds first augmented ethical hacker. With his first book Len exposes the subculture of Transhumans and the capabilities available to this new breed of human, along with the cyber security risks they pose.
Len is a co-host of the Cyber Cognition Podcast and a thought leader in the field of Transhumanism. With his upcoming book, he shares a captivating narrative of his personal evolution, solidifying his position as one of the world's foremost authorities in this transformative movement. As a futurist, Len's insights and expertise are highly sought after.
Len's passion for the Transhuman/Human+ movement is unparalleled, and he actively employs microchip implants to pioneer advancements in cyber security and enhance the human experience. His groundbreaking research has garnered global recognition, appearing in multiple global news outlets, while his regular appearances on top-tier security podcasts showcase his ongoing contributions to the field.
With a rich history as a Black/Grey Hat Hacker, Noe's extensive practical experience has shaped his skills. Over the course of 30 years, he has honed his expertise in web development, system engineering/administration, architecture, and coding. For the past ten years, Len has devoted his focus to information security from an attacker's perspective Actively engaging with the Texas information security communities and organizations like the Autism Society, Len continuously demonstrates his commitment to making a positive impact beyond the realm of technology.
Sessions
15-Nov-2024 09:45 - 10:15
[KEYNOTE] The tomorrow threats, today
Key Note 2
Malware and AI detection systems: One array to rule them all
MAILLARD Pierre-François, Security Researcher, TCG CREST/ RMVERI
MAILLARD Pierre-François
Security ResearcherTCG CREST/ RMVERI
Pierre-François Maillard is an engineer in the field of cyber security and operating system. He worked within the CVO laboratory (Operational Cryptology and Virology) in France with a specialization in the UEFI System. He has also worked in various companies in the field of reverse engineering and industrial cybersecurity. In addition, he has contributed to the field through several articles published in MISC, top french cybersecurity magazine, and academic journals based on his research. He has also presented workshops and conferences at C0c0n on his specialties. He is right now finishing his PhD at TCG CREST IAI in the field of adversarial machine learning.
15-Nov-2024 11.45 - 12.15
Malware and AI detection systems: One array to rule them all
SCAGoat - Software Composition Analysis (SCA) Vulnerability Exploration Tool
RedCloud : A Multi-Cloud Hacking OS
Yash Bharadwaj, Co-Founder & Technical architect, Cyberwarfare Labs, India
Yash Bharadwaj
Co-Founder & Technical architectCyberwarfare Labs
India
Yash Bharadwaj, Co-Founder & Technical architect at CyberWarFare Labs with over 5.5 Years of Experience as Technologist. Highly attentive towards finding, learning and discovering new TTP's used during offensive engagements. His area of interest includes building Red / Blue team infrastructure, evading AVs & EDRs, Pwning On-Premise & Multi cloud infrastructure. Previously he has delivered hands-on red / blue / purple team trainings / talks / workshops at Blackhat, cocon, Nullcon, X33fCon Poland, NorthSec Canada, BSIDES Chapters (US & Asia Pacific), OWASP Chapters, CISO Platform, YASCON etc.
Sessions
Workshop - 13th & 14th November 2024
Multi-Cloud (AWS, Azure & GCP) Security
15-Nov-2024 14.30 - 15.15
RedCloud : A Multi-Cloud Hacking OS
16-Nov-2024 12.15 - 13.00
Serverless Phishing Factory: Automate, Attack, Adapt
Manish Gupta, Director, Cyberwarfare Labs, India
Manish Gupta
DirectorCyberwarfare Labs
India
Manish Gupta is Director of CyberWarFare Labs having 6.5+ years of expertise in offensive Information Security. Previously he had worked as an operator & team lead at product based companies like Microsoft, Grab & Citrix. He specializes in Red Teaming Activities on enterprise Environment including On-premise & Multi-Cloud. His Research interest includes Real World Cyber Attack Simulation and Advanced persistent Threat (APT). Previously he has presented his research at reputed conferences like Blackhat, DEFCON, cocon, Nullcon, BSIDES Chapters, X33fcon Poland, NorthSec Canada & other corporate training etc
Sessions
Workshop - 13th & 14th November 2024
Multi-Cloud (AWS, Azure & GCP) Security
15-Nov-2024 14.30 - 15.15
RedCloud : A Multi-Cloud Hacking OS
16-Nov-2024 12.15 - 13.00
Serverless Phishing Factory: Automate, Attack, Adapt
Automated Security Engineer Co-Pilot: Leveraging Large Language Models for Enhanced Code Security
Ashwath Kumar, Head of Security, Razorpay, India
Ashwath Kumar
Head of SecurityRazorpay
India
Ashwath Kumar is currently working as Head of Security at Razorpay. Ashwath is a seasoned Principal engineer with extensive expertise in architecture reviews, cloud security, and red teaming. With a Master of Science in Computer Engineering from Texas A&M University, he has a proven track record of building and leading large teams to address complex security challenges. He has also presented at prestigious conferences such as Blackhat, Owasp, Nullcon & has written research papers with over 800 citations.
15-Nov-2024 16.30 - 17.00
Automated Security Engineer Co-Pilot: Leveraging Large Language Models for Enhanced Code Security
Hariprasad Pujari, Sr Software Development Engineer, Razorpay, India
Hariprasad Pujari
Sr Software Development EngineerRazorpay
India
Hariprasad, a graduate of IIT Kharagpur, is a Security Engineer 2 at Razorpay, specializing in building security tooling and developing in-house solutions that safeguard critical data and infrastructure. His key contributions include integrating security tools into CI/CD pipelines with GitHub Actions, advocating for "shifting left" on security to address vulnerabilities early in the development process, and automating vulnerability management. Hari's innovative approach and commitment to cybersecurity have significantly enhanced Razorpay's security posture.
15-Nov-2024 16.30 - 17.00
Automated Security Engineer Co-Pilot: Leveraging Large Language Models for Enhanced Code Security
TBA
TBA
16th November 2024 Agenda
Key Note 3
[PANEL] Strengthening CII Resilience: Building a Collaborative Community Partnership Framework
Kernel Lockdown: Reducing BSOD Risks by Restricting Third-Party Access?talk
David Baptiste, IT-Security Analyst & Researcher, ERNW - Ennor Rey Netzwerke GmbH, Germany
David Baptiste
IT-Security Analyst & ResearcherERNW - Ennor Rey Netzwerke GmbH
Germany
Dr. BapƟste David is an IT security specialist at ERNW, specialized in Windows operaƟng system. His research is mainly focused on malware analysis, reverse engineering, security of the Windows operaƟng system plaƞorm, kernel development and vulnerabiliƟes research. He also worked for couple of anƟvirus compagnies. He has given special courses and trainings in different universiƟes in Europe. Also, he gives regularly talks on different conferences including Black Hat USA, Defcon, Troopers, Zero Night, Cocon, EICAR, ECCWS…
Sessions
Workshop - 13th & 14th November 2024
Exploiting with Precision: Windbg Debugging Essentials for Security Professionals
16-Nov-2024 11.30 - 12.00
Kernel Lockdown: Reducing BSOD Risks by Restricting Third-Party Access?talk
[PANEL] When Falcon Strikes Back: The Defender's Dilemma
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
Arpith Rajagopal, Senior Security Engineer, Lendingkart, India
Arpith Rajagopal
Senior Security EngineerLendingkart
India
Arpith has presented at Accel Cybersecurity Summit 2024. His interests lie in Application Security, Automation, Red Teaming and CICD Security.
16-Nov-2024 14.45 - 15.30
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
16-Nov-2024 14.45 - 15.30
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
Suchith Narayan, Lead Security Engineer, Razorpay, India
Suchith Narayan
Lead Security EngineerRazorpay
India
Suchith has presented at Rootconf, Null, Bsides Delhi, Accel Cybersecurity Summit amongst others. His interests are in CI/CD Security, Red teaming, Application security and Threat Modeling
16-Nov-2024 14.45 - 15.30
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
16-Nov-2024 14.45 - 15.30
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
Closing Note
Key Note 3
Ride on the House - Exploiting Public Transport Ticketing Systems for Free Rides
Rakesh Seal
Rakesh Seal
16-Nov-2024 10.45 - 11.15
Ride on the House - Exploiting Public Transport Ticketing Systems for Free Rides
Diptisha Samanta
Diptisha Samanta
16-Nov-2024 10.45 - 11.15
Ride on the House - Exploiting Public Transport Ticketing Systems for Free Rides
Active Directory Deception Strategies
Madhukar Raina, Senior Training Developer, Hack The Box Ltd., India
Madhukar Raina
Senior Training DeveloperHack The Box Ltd.
India
Madhukar Raina is a Security Researcher with around 9 years of experience in information security and trainings. He works for Hack The Box, where he contributes to the malware analysis, reverse engineering, and detection engineering related content and labs. He has previously worked for Zscaler & Securonix as a Security Researcher and Threat Hunter, mainly focusing on malware analysis, reverse engineering, deception, threat hunting operations, and adversarial research. In his past roles, he has also worked on digital forensics, incident response and compromise assessment projects.
16-Nov-2024 11.30 - 12.15
Active Directory Deception Strategies
Serverless Phishing Factory: Automate, Attack, Adapt
Yash Bharadwaj, Co-Founder & Technical architect, Cyberwarfare Labs, India
Yash Bharadwaj
Co-Founder & Technical architectCyberwarfare Labs
India
Yash Bharadwaj, Co-Founder & Technical architect at CyberWarFare Labs with over 5.5 Years of Experience as Technologist. Highly attentive towards finding, learning and discovering new TTP's used during offensive engagements. His area of interest includes building Red / Blue team infrastructure, evading AVs & EDRs, Pwning On-Premise & Multi cloud infrastructure. Previously he has delivered hands-on red / blue / purple team trainings / talks / workshops at Blackhat, cocon, Nullcon, X33fCon Poland, NorthSec Canada, BSIDES Chapters (US & Asia Pacific), OWASP Chapters, CISO Platform, YASCON etc.
Sessions
Workshop - 13th & 14th November 2024
Multi-Cloud (AWS, Azure & GCP) Security
15-Nov-2024 14.30 - 15.15
RedCloud : A Multi-Cloud Hacking OS
16-Nov-2024 12.15 - 13.00
Serverless Phishing Factory: Automate, Attack, Adapt
Manish Gupta, Director, Cyberwarfare Labs, India
Manish Gupta
DirectorCyberwarfare Labs
India
Manish Gupta is Director of CyberWarFare Labs having 6.5+ years of expertise in offensive Information Security. Previously he had worked as an operator & team lead at product based companies like Microsoft, Grab & Citrix. He specializes in Red Teaming Activities on enterprise Environment including On-premise & Multi-Cloud. His Research interest includes Real World Cyber Attack Simulation and Advanced persistent Threat (APT). Previously he has presented his research at reputed conferences like Blackhat, DEFCON, cocon, Nullcon, BSIDES Chapters, X33fcon Poland, NorthSec Canada & other corporate training etc
Sessions
Workshop - 13th & 14th November 2024
Multi-Cloud (AWS, Azure & GCP) Security
15-Nov-2024 14.30 - 15.15
RedCloud : A Multi-Cloud Hacking OS
16-Nov-2024 12.15 - 13.00
Serverless Phishing Factory: Automate, Attack, Adapt
Remote Whispers of Mobile Sim
V Kumar, Independent Researcher, & Reverse Engineer, India
V Kumar
Independent Researcher& Reverse Engineer
India
V Kumar is a independent researcher & reverse engineer. He has spoken at several international security conferences such as BlackHat/Hack-in-the-Box/NullCon etc. He has more than 2 decades of experience in Reverse Engineering Software and Hardware world, Defeating cryptographic solutions, Developing 0-day exploits, Analyzing RF and SatComs for secure communications and protocols, Aiming for few nano seconds in extremely high performance computing environment. He has been active in the scene since DOS era.
16-Nov-2024 14.00 - 14.45
Remote Whispers of Mobile Sim
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
Arpith Rajagopal, Senior Security Engineer, Lendingkart, India
Arpith Rajagopal
Senior Security EngineerLendingkart
India
Arpith has presented at Accel Cybersecurity Summit 2024. His interests lie in Application Security, Automation, Red Teaming and CICD Security.
16-Nov-2024 14.45 - 15.30
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
16-Nov-2024 14.45 - 15.30
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
Suchith Narayan, Lead Security Engineer, Razorpay, India
Suchith Narayan
Lead Security EngineerRazorpay
India
Suchith has presented at Rootconf, Null, Bsides Delhi, Accel Cybersecurity Summit amongst others. His interests are in CI/CD Security, Red teaming, Application security and Threat Modeling
16-Nov-2024 14.45 - 15.30
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
16-Nov-2024 14.45 - 15.30
The Stealth Code Conspiracy: Unmasking Hidden Threats in CI/CD Pipelines
Invisible Invaders: Bypassing Email Security with Legitimate Tools
Dhruv Bisani, Head of Adversarial Attack Simulations, Starling Bank, United Kingdom
Dhruv Bisani
Head of Adversarial Attack SimulationsStarling Bank
United Kingdom
Dhruv is an experienced cybersecurity expert with 10+ years of experience and a key interest in leading and delivering Adversarial Attack (Red/Purple Team) simulations, along with dealing with audiences at all levels, from IT engineers to executives.
Currently, he is the Head of Adversarial Attack Simulation at Starling Bank, a leading UK Bank, where he developed Red Team capabilities to target novel tech stacks such as macOS and Zero-trust architecture. His role involves delivering both technical attack simulations and working closely with executives.
Prior to that, he founded & led the Red Team at Resillion (previously known as Eurofins Cyber Security) - a global consultancy working with a wide range of clients, and achieved revenue of >1M$ per year.
Over the last few years, Dhruv’s core focus has been on developing the red team capability, while focusing on testing less common environments such as Zero-trust & macOS. He has successfully delivered advanced attack simulations across a range of sectors including finance, healthcare, legal, and retail. He possesses extensive experience in executing projects under the UK CBEST/TBEST schemes. His current role encompasses a wide array of responsibilities such as recruitment, training, overseeing sales/finances, as well as enhancing technical methodologies and processes.
Dhruv has delivered talks at 10+ conferences internationally, such as GISEC Dubai 2024, BSides London 2023 & e-crime Denmark 2023, as well been part of panels such as “Ask the Hacker,” “Getting started in Industry” at several conferences.
Earned several industry leading certificates such as CREST Certified Simulated Attack Specialist, CREST Certified Tester INF & WEB, Certified Red Team Expert , Certified Azure Red Team Professional, Offensive Security Certified Professional, Microsoft AZ 900 & 500.
Sessions
16-Nov-2024 15.45 - 16.15
Invisible Invaders: Bypassing Email Security with Legitimate Tools
Breaking the Pipeline: Methodologies for Attacking CI/CD Systems
Anant Shrivastava, Chief Researcher / Founder, Cyfinoid Research Private Limited, India
Anant Shrivastava
Chief Researcher / FounderCyfinoid Research Private Limited
India
Anant Shrivastava is an information security professional with 15+ yrs of corporate experience in Network, Mobile, Application and Linux Security. Anant is an avid opensource supporter and runs multiple opensource projects prominent of them being TamerPlatform and CodeVigilant.
He contributes to multiple Open communities like null and Garage4Hackers. He has also helped establishing local chapter in his hometown null Bhopal
He has been a speaker and a trainer at a multitude of conferences such as Black Hat -USA/ASIA/EU, Defcon, Nullcon, c0c0n, Rootconf and many more).
He also participates in various communities as a cfp reviewer. Notable of them being Blackhat EU, nullcon, Rootconf by Hasgeek, recon village @ Defcon , cloud village @ defcon, Adversary Village @ defcon
His code contributions can be found on Github. He is active on Twitter and Fediverse and his talks and presentations can be found here. He writes about his experiments at his blog.
Sessions
Workshop - 13th & 14th November 2024
Attack & Defend Android Applications
16-Nov-2024 16:15 - 16:45
Breaking the Pipeline: Methodologies for Attacking CI/CD Systems