Workshops / Training / Demos

New for 2015 we have decided to run a series of workshops, training, and demos.

We have 3 workshops planned and still have a 1hr workshop space availble.

 

The workshops we have planed are detailed below.  Some require pre-registation, and some require a laptop and software to be pre-installed. So please read carefully.

 

10:00 - 11:00 - Industrial Control Systems (ICS) Security Demo

Ben Green - Security Lancaster (@LancsUniSecure)

William Knowles (@william_knows) - Security Lancaster

 

Security Lancaster will provide a general overview of Industrial Control Systems (ICS) and the environments in which they are used. Using real-world hardware and software taken from Security Lancaster’s ICS test bed, a demonstration of basic functionality will be provided. A summary of security challenges stemming from social, technical, and organisational domains, will lead into a demonstration of attacks, highlighting their impact on operational processes and user visibility. The presentation will conclude with a more detailed discussion of Security Lancaster’s ICS test bed facilities and related research.

 

 

11:30 - 12:30 - Workshop slot available

This slot is still availbale - Contact us if you have a 1hr workshop, demo, or training session you would like to give.  It can be extened by 30mins if required into the lunch break.

 

 

13:30 - 15:30 - Windows Privilege Escalation

Francesco Mifsud (@GradiusX) - Context

Ruben Boonen (@FuzzySec) - Context

 

The Windows Privilege Escalation workshop aims to provide attendees with a solid understanding of the various steps required to go from low level privileges to SYSTEM level privileges.

 

To get the most out of the workshop you will need:

• Laptop with 500mb RAM (1gb recommended) ‎that can be dedicated to a virtual machine.

• VMWare player (free download - https://my.vmware.com/web/vmware/free).

• A fully charge battery (available power points are limited).

• We highly recommend having a vanilla Windows 7 VM ready-to-go for the workshop. A free copy of which can be downloaded from https://www.modern.ie/en-gb/virtualization-tools#downloads

 

 

15:45 - 17:45 - Secure Coding

Paul Johnson - Pen Test Ltd

 

This 2 hour session is a brief intro to Secure Coding in Java (for pre-registered participants only).  This course is aimed at developers with an interest in security, rather than security professionals.

 

Course Prerequisites:

• Have some Java coding experience.

• Bring a laptop, any OS, must have 64-bit processor and 4gb RAM.

• Install VirtualBox.

• Download and install the workshop virtual machine from http://www.pentest.co.uk/events/bsidesmcr-2015.html

• Pre-register, by emailing francesca.bowman@pentest.co.uk. Please specify in the email if you'd prefer Java or C#.

• A fully charge battery (available power points are limited).