Workshops
Together with CyberEd, we are going to organize five paid workshops.
Admissions are now closed
Select workshop
COM Objects: Ancient Knowledge
COM Objects: Ancient Knowledge
August 24, from 15:00 to 17:00. Paid event
What the workshop is about:
You will learn the ins and outs of the COM technology and get to know key approaches to researching Windows. The workshop includes practical assignments to create a COM object, an AMSI Provider, and a client for interaction with system COM servers.
Length: 2 hours
Who the workshop is for:
Security researchers with Windows programming experience, red team and blue team testers
Featuring:
- COM foundations: COM objects, AMSI Providers, clients for interaction with system COM servers
- Approaches to researching Windows
- RPC
Prerequisites:
- Basic knowledge of Windows (architecture, security)
- Basic knowledge of C/C++
- General awareness of what WinAPI is
Must-haves on your device:
- Visual Studio Community Edition (C/C++, C#)
- Sysinternals
- OleView
- PavelTools (optionally)
What you get:
- Repository with code and executable files necessary for research
- Configuration files to set up the auditing functionality on the host
Coach
Vladislav Burtsev
Threat intelligence analyst, Kaspersky
Vladislav began his career as a SOC analyst and later moved on to the position of a technical expert. In this capacity, he gained experience in administering security tools.
Vladislav is a regular speaker at cybersecurity conferences.
Key competencies:
Windows Security
Threat Hunting
Threat Intelligence
Flagging it right: is ML the way to go?
Flagging it right: is ML the way to go?
August 24, from 17:30 to 19:30
Why attend the workshop
The workshop will focus on the sensitivity of cybersecurity tools and the importance of prompt response to computer incidents. You will look into a number of cases including robust solutions
Duration: 2 hours
Who might find this interesting
- Forensics specialists
- Data science specialists
Program
Logs of numerous tools put a great burden on cybersecurity specialists. At the workshop, you will look into ways to solve this problem: how to detect a rare event or an anomaly using machine learning tools and metric approaches
You will definitely need
- Familiarity with incident logging
- Working forensics knowledge
Your machine should have
- Browser and internet connection (for beginners)
- Development environment and internet connection (for specialists with ML experience)
You will be provided with
- Links to a repository
- Demo dataset
- Colab notebook
Coach
Artyom Menisov
AI and cybersecurity researcher
Artyom holds a candidate of technical sciences degree. He has authored more than 50 cybersecurity publications. Spoke at PHDays 11 and the forum Digital economy: trustworthy artificial intelligence technologies (2023).
Key competencies:
AI systems development
Research on trust in ML models
Selection and adaptation of ML models for cybersecurity needs
Breaking the CI/CD
Breaking the CI/CD
August, 25 from 10 A.M. to 12 P.M. Paid event
What the workshop is about:
We’ll take a look at the security of CI/CD components and pipelines, the hacking of which is often overlooked in standard pentests.
Duration: 2 hours
Who the workshop is for:
Pentesters and security professionals with limited experience in attacks on CI/CD components
Featuring:
- Security of CI/CD components and pipelines
- Pushing the boundaries of standard pentests
Prerequisites:
- Basic knowledge of GitLab CI
- Kubernetes
- Docker
Must-haves on your device:
- kubectl for deploying applications
- Docker
- Netcat
What you get:
Access to a test CI/CD infrastructure
Coach
Pavel Sorokin
Lead security engineer, Ozon
Pavel has experience as a pentester at Informzaschita and BI.ZONE. Prior to his current position, he also worked for Application Security and Yandex.
Pavel is a regular speaker at cybersecurity conferences.
His speaking engagements include:
- GraphQL applications security testing automatization (ZeroNights 2019)
- PDO and the problems that can be caused by 0 byte (ZeroNights 2021)
- OPA с Docker executor (BEKON 2023)
Key competencies:
Web application security
Secure application development
Penetration testing
Security assessment
Pentesting Android mobile applications
Pentesting Android mobile applications
August 25, from 12:30 to 14:30
Why attend the workshop
During the workshop, you are going to pentest a quasi‑real Android application and learn more about the different aspects of finding bugs and vulnerabilities.
Duration: 2 hours
Who might find this interesting
- Beginning and experienced pentesters
- Mobile application developers
- Anyone interested in cybersecurity and penetration testing
Program
- General information about APK
- adb, jadx, Apktool usage
- Deployment of test tools
- Attack surface development
- Vulnerability search and exploitation
- Application hacking
You should ideally have
- Basic technical skills
- Basic knowledge of Java syntax
- Experience working with any popular OS
You will be provided with
Access to the workshop application
Coach
Igor Krivonos
Android developer (Java/Kotlin), penetration testing specialist (Android/iOS), security engineer, Python developer, lecturer of mobile device security and Android development in Python
Pivoting
Pivoting
August 25, from 15:00 to 17:00
Why attend the workshop
The workshop will delve into the tools used in traffic tunneling and the basics of their operation. In particular, it will examine some of the tunneling options for different operating systems. Other topics include ports forwarding, traffic obfuscation, and masquerading as legitimate protocols. You are going to be working on virtual machines.
Duration: 2 hours
Who might find this interesting
- Pentesters
- SOC analysts
- All specialists interested in practical cybersecurity
Program
Pivoting as a set of techniques that enable an attacker to gain access to private network segments, using compromised machines as intermediate nodes. The workshop will explore some of such techniques
You should ideally have
- Basic knowledge of networks
- Familiarity with Linux and Windows administration
- Working terminals knowledge
Your machine should have
VirtualBox or VMware
You will be provided with
Virtual machines for practical exercises
Coach
Yaroslav Shmelyov
CyberED Lecturer, Standoff 2022 prize winner (as a member of the Invuls team)
Key competencies:
Threat analysis
Pentesting
Well, you know the drill