1. Non-Executable Malware & Scriptable C2 Agents 2. SQL Query Truncation

28/10 Update - new presentation: 2. SQL Query Truncation
Talk Submissions: ruxmon@proton.me

1. Weaponizing Starlark: Non-executable Malware and Scriptable C2 Agents
Starlark is a Python dialect mainly used as a configuration language. The interoperability with Go makes it a perfect choice for Go-based C2 agents. This talk explains the concepts of the Starlark module system in emp3r0r C2; demonstrates detection evasion compared to traditional BOF modules; and how scripting agent on the fly becomes possible. Jimmy Mi is a malware researcher and Linux user, specialising in OS internals and offensive security research.

2. SQL Query Truncation
This talk will show details of a new vulnerability that allowed truncating SQL queries in certain web applications.

Luke Jahnke (ace) is a Security Researcher specialising in web application security and he blogs very interesting stuff related to cybersecurity at nastystereo.com

Location
Room 080.02.002 at RMIT (Building 80) - 445 Swanston St, Melbourne

Discord
Discord Invite