dApp security & reverse engineering of int overflow - SecTalks SYD0x44 (68th)
Details
Due to an unforeseen last-minute circumstance, our main talk will be postponed, but don't worry, the meetup will still happen and we are going to listen to another exciting talk + networking session afterwards.
# Talk
dApp/web3/smart contract security is a whole new world where we should re-learn and change our perspective on security concepts. In this workshop, we see dApp from a security angle. We then dive into a Solidity vulnerability and reverse engineer the security bug. We conclude with ways to effectively eliminate the vulnerability.
by @pi3ch
# Sponsors
Google (we are hiring! https://goo.gle/seceng-syd)
Amazon Information Security (https://j.mp/3eiTfEC)
SecDim (https://secdim.com)
Venue host: Rokt (https://www.rokt.com)
# Notes
- For sponsoring SecTalks Sydney, contact [sydney@sectalks.org](mailto:sydney@sectalks.org)
- To speak at SecTalks, fill up https://j.mp/sectalkscfp
# POSTPONED: Main talk
Penetration testing intends to improve an organisation's security posture. However, such a potentially invasive process can often provide pentesters with significant or, in some cases, unprecedented access to an organisation's most sensitive systems. Without considering the results of their actions, or the behaviours of their tooling, pentesters can leave remnants of their privileged activities for real attackers to find, or even be detrimental to the overall security posture of the organisation by changing the state of play to benefit a real attacker.
This talk aims to address some of the key operational risks in the daily life of a penetration tester, provide guidance to penetration testers to reduce any potential negative impact towards their target network, and to accentuate the point that Twitter is not always a great source of real-world penetration testing techniques.
# POSTPONED: Speaker - Troy Defty (@5ud0ch0p)
Having worked in the UK and Australian InfoSec industries for around a decade, and following 8 and a half years of penetration testing, Troy recently jumped the proverbial fence from red to blue, and is currently a Security Engineering Manager of an internal detection team. His interest and experience is in detection engineering, red teaming, threat modelling, and assessing ICS environments. Other interests include music, electronics, the outdoors, travel, rugby, CTF, and being bad at golf.