DFW_2019


BSidesDFW 2019

 

 

 

Security B-Sides Dallas/Fort Worth (BSidesDFW) is back for it's 10th year.

If you missed it we are now a 501(c)(3) non-profit.  We are working on not only bringing you the best un-conference possible, but also researching options to grow.  As usual we are striving to provide an awesome one day experience in the form of a local low cost alternative for the security curious hobbyists, enthusiasts, practitioners, and researchers.

 

 

Follow us on
Twitter: @BSidesDFW 

 

 

DATE AND LOCATION:

When:  02 Nov 2019

Where:  Tarrant County College (TCC)

300 Trinity Campus Cir, Fort Worth, TX 76102

Parking Garage entrance is the north side of Belknap and Cherry.

Event building is attached to the garage.

 

 

Cost: Free (for now)

Invite your friends by posting this on Twitter: "#BSidesDFW2019"

 

 

BSidesDFW 2019 Registration:

Walk-ins are welcome.  You just might not get the fancy badge.

** We are implementing a maximum count this year **

If you are pre-registered check in promptly.  No show badges will be released at 10 AM.

If you are pre-registered and know you can't make it please refund ticket via EventBrite.

 

Registration is FULL!

https://v.gd/AVE3cV

Registration is not required for attendance.

Registration will, however, ensure that you get in.

Unclaimed tickets are released at 10 AM.

 

 

BSidesDFW 2019 Hotel(s):

Official Event Hotel is Courtyard Fort Worth Downtown / Blackstone

Courtyard Fort Worth Downtown/Blackstone, located at 601 Main Street, Fort Worth, TX  76102-5407.

Use link https://www.marriott.com/events/ before on on 25 Oct 2019.

 

 

BSidesDFW 2018 CFP is Closed 

https://v.gd/R8kVc7 

Submission deadline, Midnight 27 Sep 2019.

 

 

 


 

BSidesDFW 2019 Sponsorship

 

The 2019 Sponsorship Kit is now available!  

Also on Google Drive https://v.gd/RTP0SP

 

If you represent a company and are interested in supporting BSidesDFW please contact us.

bsidesdfw [at] gmail [dot] com

 

 

Sponsorship Levels
See the above linked PDF file for details

WAYFARER:  $500, Join the family and get recognized

ROVER:  $1,000 Make it last and get monochrome logo printed on T-Shirt

PATHFINDER:  $2,000 Be interactive - claim a booth or co-branded schwag (limited availability)

TRAILBLAZER:  $3,000 Stand out with a premium T-Shirt logo or Badge&Lanyard

ADVENTURER:  $4,000 Leave a mark - wrap a podium, name a room, or feed the masses

 

 

A huge Thank You! to our BSidesDFW 2019 Sponsors

 

Adventurers

 

Venue provided by:

 

Lunch Provided by:

 

 

Trailblazers

 

Badges provided by:

 

 

Reception provided by:

 

 

Shirts provided by:

 

 

 

Pathfinders

 

 

 

 

 

 

 

 

Rovers

 

After-Party provided by:

 

 

 

 

Door prize provided by:

 

 

 

 

 

 

 

 

 

 

 

Wayfarers

 

 

 

 


 

BSidesDFW 2019 Schedule

 

Speaker Tracks

** Schedule is subject to change

 

 

Saturday

02 Nov 2019

Chill-Out

"Action B"

Lobby Con

All Day

Sponsor Booths

TCC   |   PepsiCo   |   DDI   |   Palo Alto Networkls / Prisma   |   Corelight   |   CarbonBlack / Red Canary   |

Prevade Cyber Security   |   The Pwn School Project   |   DFW Community

 
All Day
Moe's Lock Sport - The best little lockpick village this side of the Brazos  

All Day

Prevade CTF 

 

All Day

Scavenger Hunt

 

All Day

 

 

 

 

 

Saturday

02 Nov 2019

Track One (1)

"Energy Auditorium"

Recorded

Track Two (2)

"Action A"

might be recorded 

Web App / Mentor  Village

"Action C"

 

0800 -- Registration by main elevators
-- Registration by main elevators -- Registration by main elevators
0900
Opening Remarks Opening Remarks overflow and simulcast
-- -- -- -- -- -- -- --

930

Do you even OSINT, bro? How to get started and stay afloat while conducting OSINT

-- Rick Holland  @rickhholland

-- Charles Ragland  @maxdose_

Linksys, I've a feeling we're not in Texas anymore:  Homebrew of RaspberryPi bash ssh connect scripts with google spreadsheet

-- Rex Tran  @r3x3r

Web App Village

 

Pwning Web Apps – An Intro to Web App Pentesting Part 1

** Hardware requirements for the virtual lab:

VirtualBox or VMWare

Laptop with 20GB for free disk space

 

-- The Pwn School Project   @SchoolPwn

-- Phillip Wylie  @PhillipWylie 

 

1030

Anti-Dox: Tried and tested methods to keep your address secret in a public world

-- Michael West  @t3hub3rk1tten

Back to the Basics: The Home Lab

-- Malcolm  @leetnet

Part 1 cont.

Introductory web application penetration testing workshop

Participants will learn the basics of web app pen-testing, including; methodology, tools, techniques, and resources.

Skills for pen-testers and aspiring bug hunters.

 

 

1130

Hackers and PTSD: Hunting terrorists isn't always roses and sunshine

-- David Evenden  @JediMammoth

Purple Packets: Effective Network Defense Against Real-World Attacks

-- Matt Bromiley  @mbromileyDFIR

-- Aaron Soto  @_surefire_

The ultimate pentest: Can you take over a city infrastructure in 30 hours or less? An interactive session

-- 38P

1230 -- Lunch

-- Lunch

-- Lunch
1330

Power of Community Hacking

-- WhiskeyNeon  @WhiskeyNeon  

-- INIT_6  @INIT_3

@blackmarblesh

RFCs are Useful

-- Roxy Dee  @theroxyd

 

Mentor Village

 

Mentoring 101

It's okay to be new, mentee / mentor

 

-- Ell Marquez  @ell_o_punk

-- and special guests

 

1430

Threat Hunting on a Budget

-- Joshua Murchie  @josh_murchie

-- Dalton Ireland

-- Joseph Pisano  @iHighjynx

How Neurodiversity can be Leveraged for an Excellent ROI

-- Megan Roddie  @megan_roddie

Mentor cont.

 

 

 

1530

CloudCopy: Stealing secrets from cloud instance volumes

-- Tanner Barnes  @_StaticFlow_

 

Drag: Creating a new identity while obscuring your own

-- Victoria Lloyd  @vvanitydevil 

Web App Village

 

Pwning Web Apps – An Intro to Web App Pentesting Part 2

** Hardware requirements for the virtual lab:

VirtualBox or VMWare

Laptop with 20GB for free disk space

 

-- The Pwn School Project   @SchoolPwn

-- Phillip Wylie  @PhillipWylie 

 

1630 

Getting Started With Ghidra

-- Wesley McGrew  @McGrewSecurity

Detecting and Preventing MageCart-esque Attacks

-- Peter Hefley  @peterhefley

 

Part 2 cont.

Introductory web application penetration testing workshop

Participants will learn the basics of web app pen-testing, including; methodology, tools, techniques, and resources.

Skills for pen-testers and aspiring bug hunters.

 

1730

-- Closing  -- Closing  -- Closing 

 

 

 

Saturday

02 Nov 2019

Hardware Hacking Village

"Speed"

 

 

OSINT Village

"Win"


IPv6 Village / Track Three (3)

"Connect"

Mental Health Village

"Trinity Point"

0800 -- Registration by main elevators -- Registration by main elevators -- Registration by main elevators -- Registration by main elevators
0900
-- -- -- -- -- -- -- --  -- -- -- -- -- -- -- --
-- -- -- -- -- -- -- --
-- -- -- -- -- -- -- --

930

Hardware Hacking Village

 

Tutorials

Firetalks 

Competition

 

-- @Alt_Bier

-- special guests

Why is no one using these bindings?

-- count3rmeasure  @count3rmeasure

 

IPv6 Village

IPv6: Basics, in Wireshark, Troubleshooting, Hacking

** Hardware requirements laptop with wireshark

 

-- Jeff Carrell  @JeffCarrell_v6

 

 

 

Mental Health Village

 

-- Mental Health Hackers  @HackersHealth

1030

HHV cont. 

OSINT Village

 

OSINT Workshop 

An entry-level overview of various Open Source Intelligence (OSINT) tools and processes, including a how-to workshop using Digital Shadows’ internally developed OSINT framework, Orca

 

** Hardware requirements laptop with Virtualbox or VMWare (VM images will be provided for either platform)

Computer capable of running a 2 core, 4096mb RAM VM, with 25GB free drive space

A Shodan API key, and a GitHub personal access token (both free)

 

-- @digitalshadows

IPv6 cont.

MHV cont.

1130

HHV cont.

OSINT Workshop cont.

IPv6 cont.

MHV cont.

1230 -- Lunch -- Lunch -- Lunch

-- Lunch

1330

Hardware Hacking Village

 

Tutorials

Firetalks 

Competition

 

-- @Alt_Bier

-- special guests

OSINT Village

 

OSINT Workshop (encore 1)

An entry-level overview of various Open Source Intelligence (OSINT) tools and processes, including a how-to workshop using Digital Shadows’ internally developed OSINT framework, Orca

 

** Hardware requirements laptop with Virtualbox or VMWare (VM images will be provided for either platform)

Computer capable of running a 2 core, 4096mb RAM VM, with 25GB free drive space

A Shodan API key, and a GitHub personal access token (both free)

 

-- @digitalshadows

Track Three (3)

 

The Ethics of Insider Threat Monitoring

-- pesto  @pesteaux

 

Mental Health Hackers

 

-- Mental Health Hackers  @HackersHealth

1430

HHV cont. 

 

OSINT Workshop cont.

Non-Political Security Learnings from the Mueller Report

-- Arkadiy Tetelman  @arkadiyt

MHV cont.

1530

HHV cont. 

OSINT Village


OSINT Workshop (encore 2)

An entry-level overview of various Open Source Intelligence (OSINT) tools and processes, including a how-to workshop using Digital Shadows’ internally developed OSINT framework, Orca

 

** Hardware requirements laptop with Virtualbox or VMWare (VM images will be provided for either platform)

Computer capable of running a 2 core, 4096mb RAM VM, with 25GB free drive space

A Shodan API key, and a GitHub personal access token (both free)

 

-- @digitalshadows

 

ATT&CKing Koadic with EQL

-- Daniel Stepanic  @DanielStepanic

MHV cont.

1630  ** Room Teardown  OSINT Workshop cont.

Radio hacking 101: a case study in how to DoS the global APRS network

-- Michael West  @t3hub3rk1tten

** Room Teardown

1730

-- -- -- -- -- -- -- --  -- -- -- -- -- -- -- --
-- -- -- -- -- -- -- --
-- -- -- -- -- -- -- --

 

 

 

Un-Conference Activities

 

Reception - hosted by Prisma @PaloAltoNtwks - World of Beer

     20:00-22:00  /  3252 W 7th St,  Fort Worth, TX 76107

 

War-Driving Competition - hosted by @Hack_FtW

 

Hardware Hacking Village - hosted by @alt_bier  /  http://altbier.us/

Soldering Competition - hosted by @alt_bier

Badge Design and Challange - by  @alt_bier @unspecific & minions / https://akirabadge.com

 

Lockpick Village - hosted by @LockpixNLipstix

LockSport Competition - hosted by @LockpixNLipstix

 

Capture-The-Flag - hosted by @PrevadeLLC

 

Scavenger Hunt - hosted by @BankofAmerica

 

Workshop Web App Sec - hosted by @SchoolPwn

 

Workshop OSINT - hosted by @digitalshadows

 

Workshop IPv6 - hosted by @JeffCarrell_v6

 

Workshop Mentoring 101- hosted by @ell_o_punk

 

After-Party - hosted by @HaysWorldwide - Jake's Burgers and Beer

     19:00 - 21:00 at 515 Main St., Fort Worth, TX 76102

 


 

BSidesDFW 2019 Coordinators

 

 

 

 

Tags for flickr, twitter, blog, etc.

Please use the tag #BSidesDFW2019 for content related to this event.