{"id":29125845,"url":"https://github.com/mbrg/talks","last_synced_at":"2026-02-01T21:32:57.871Z","repository":{"id":63475044,"uuid":"530630145","full_name":"mbrg/talks","owner":"mbrg","description":"BSides, OWASP, DEFCON, RSAC, SANS Talk Material, References and Extra Bits","archived":false,"fork":false,"pushed_at":"2025-07-19T18:21:07.000Z","size":36155,"stargazers_count":14,"open_issues_count":0,"forks_count":0,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-07-19T21:44:34.162Z","etag":null,"topics":["appsec","blueteam","bsides","hacking","infosec","lowcode","nocode","owasp","owasp-top-10","pentesting","redteam","rsac","sans","security"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mbrg.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":"license","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-08-30T11:40:43.000Z","updated_at":"2025-07-19T18:21:11.000Z","dependencies_parsed_at":"2025-06-29T22:14:17.065Z","dependency_job_id":null,"html_url":"https://github.com/mbrg/talks","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/mbrg/talks","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mbrg%2Ftalks","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mbrg%2Ftalks/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mbrg%2Ftalks/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mbrg%2Ftalks/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mbrg","download_url":"https://codeload.github.com/mbrg/talks/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mbrg%2Ftalks/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28991744,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-01T20:57:35.821Z","status":"ssl_error","status_checked_at":"2026-02-01T20:57:29.580Z","response_time":56,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["appsec","blueteam","bsides","hacking","infosec","lowcode","nocode","owasp","owasp-top-10","pentesting","redteam","rsac","sans","security"],"created_at":"2025-06-29T22:04:13.291Z","updated_at":"2026-02-01T21:32:57.866Z","avatar_url":"https://github.com/mbrg.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"UPDATE: THIS PAGE MOVED TO MY WEBSITE [MBGSEC.COM/TALKS](https://mbgsec.com/talks).\n\n# Talk Materials\n\n[![stars](https://img.shields.io/github/stars/mbrg?icon=github\u0026style=social)](https://github.com/mbrg)\n[![twitter](https://img.shields.io/twitter/follow/mbrg0?icon=twitter\u0026style=social\u0026label=Follow)](https://twitter.com/intent/follow?screen_name=mbrg0)\n\nWelcome!\n\nIn this repo you'll find:\n\n- [x] Recommended pre-reading talks\n\n- [x] Talk abstracts\n\n- [x] Contact details\n\n- [x] Links to demos on YouTube, articles and references\n\n- [x] Source code for everything\n\n- [x] The slides\n\n- [x] Video recordings\n\nStay tuned.\n\nTalks (there are more on [my website](https://mbgsec.com/talks)):\n\n| Date | Conference | Talk | Source code | Slides | Video |\n| - | - | - | - | - | - |\n| 2022-08-13 | DEFCON30 | [No-Code Malware: Windows 11 At Your Service](2022-08-13_DEFCON_30/No_Code_Malware) | V | V | [V](https://www.youtube.com/watch?v=e8PEIOa6W9M) |\n| 2022-08-13 | DEFCON30 | [Low Code High Risk: Enterprise Domination via Low Code Abuse](2022-08-13_DEFCON_30/Low_Code_High_Risk) | V | V | [V](https://www.youtube.com/watch?v=D3A62Rzozq4) |\n| 2022-08-31 | OWASP Global AppSec APAC 2022 | [Dominating the Enterprise via Low Code Abuse](2022-08-31_OWASP_Global_AppSec_APAC/Low_Code_Abuse) | V | V | To be released |\n| 2022-09-01 | OWASP Global AppSec APAC 2022 | [No Code Risk: What Happens When We Leave No Code up for Grabs](2022-08-31_OWASP_Global_AppSec_APAC/Low_Code_Abuse) | V | V | To be released |\n| 2022-09-22 | BSides Singapore 2022 | [Malware Powered by Windows 11 No-Code](2022-09-22_BSides_Singapore/Malware_Powered_by_Windows_11_No_Code) | V | V | [V](https://www.youtube.com/watch?v=Y3fKAgQlHvE) |\n| 2022-10-28 | LASCON 2022 | [No Code Risk: What Happens When We Leave No Code up for Grabs](2022-10-28_OWASP_LASCON/No_Code_Risk_What_Happens_When_We_Leave_No_Code_Up_for_Grabs) | V | V | [V](https://www.youtube.com/watch?v=Skr4Yj3s8ms) |\n| 2022-11-02 | LowCodeCon 2022 | [How to Govern and Secure Low-Code/No-Code Apps](2022-11-02_LowCodeCon/How_to_Govern_and_Secure_Low_Code_No_Code_Apps) | V | V | [V](https://www.youtube.com/watch?v=lgPzDD2TaCE) |\n| 2022-11-17 | OWASP Global AppSec US 2022 | [Windows RCE as a Service](2022-11-17_OWASP_Global_AppSec_US/Windows_RCE_as_a_Service) | V | V | Not recoded |\n| 2022-11-19 | BSides Vienna 0x7E6 | [No-Code Malware: Windows at Your Service](2022-11-19_BSides_Vienna_0x7E6/No_Code_Malware_Windows_at_Your_Service) | V | V | Not recorded |\n| 2022-11-19 | BSides Orlando | [No-Code Malware: Windows at Your Service](2022-11-19_BSides_Orlando/No_Code_Malware_Windows_at_Your_Service) | V | V | Not recorded |\n| 2023-01-05 | RSAC 365 | [OWASP Top 10 Security Risks for Low-code/No-code](2023-01-05_RSAC_365/OWASP_TOP_10_LOWCODE_NOCODE) | V | V | [V](https://www.rsaconference.com/library/webcast/130-owasp-top-10-security-risks) |\n| 2023-01-23 | Workato IL Community Event 2023 | [Automated Security Governance](2023-01-23_Workato_IL_Community/Automated_Security_Governance) | V | V | Not recorded |\n| 2023-02-15 | OWASP Global AppSec Dublin 2023 | [Credential Sharing as a Service: the Dark Side of No Code](2023-02-15_OWASP_Global_AppSec_Dublin/Credential_Sharing_as_a_Service) | V | V | [V](https://youtu.be/AD0R4qyrh3g) |\n| 2023-02-28 | DC9723 | [No-Code Malware: Windows 11 At Your Service](2023-02-28_DC9723/No_Code_Malware_Windows_at_Your_Service) | V | V | Not recorded |\n| 2023-03-28 | CodeFrenzy 2023 | [Credential Sharing as a Service: the Dark Side of No Code](2023-03-28_CodeFrenzy/Credential_Sharing_as_a_Service) | V | V | To be released |\n| 2023-04-18 | SANS Cybersecurity Leadership Summit UK 2023 | [Credential Sharing as a Service: the Dark Side of No Code](2023-04-18_SANS_UK/Credential_Sharing_as_a_Service) | V | V | SANS CISO Network |\n| 2023-04-22 | BSidesNYC 2023 | [Low Code High Risk: Enterprise Domination via Low Code Abuse](2023-04-22_BSidesNYC/Low_Code_High_Risk) | V | V | [V](https://www.youtube.com/watch?v=j0uUpsuUoFQ) |\n| 2023-04-23 | BSidesSF 2023 | [Sure, Let Business Users Build Their Own. What Could Go Wrong?](2023-04-23_BSidesSF/Sure_Let_Business_Users_Build) | V | V | [V](https://youtu.be/Z0RvO6s7Jxk) |\n| 2023-04-23 | BSidesSF 2023 | [Windows 11 At Your Service](2023-04-23_BSidesSF/No_Code_Malware) | V | V | [V](https://youtu.be/yVRglHWHLC8) |\n| 2023-04-28 | RSAC 2023 | [Credential Sharing as a Service: the Dark Side of No Code](2023-04-28_RSAC/Credential_Sharing_as_a_Service) | V | V | [V](https://www.youtube.com/watch?v=QtaA5U7LJ74) |\n| 2023-05-17 | OWASP AppSec IL 2023 | [Sure, Let Business Users Build Their Own. What Could Go Wrong?](https://owaspappsecil2023.sched.com/event/1LLBj/sure-let-business-users-build-their-own-what-could-go-wrong) | | | |\n| 2023-08-08 | BSidesLV 2023 | [All You Need is Guest: Beyond Enumeration](https://www.bsideslv.org/talks#U3MYWG) | | | |\n| 2023-08-09 | BSidesLV 2023 | [Wolves in Windows Clothing: Weaponizing Trusted Services for Stealthy Malware](https://www.bsideslv.org/talks#VFRS7E) | | | |\n| 2023-08-09 | BSidesLV 2023 | [Sure, Let Business Users Build Their Own. What Could Go Wrong?](https://www.bsideslv.org/talks#CCDUFQ) | | | |\n| 2023-08-10 | BlackHat US 2023 | [All You Need Is Guest](https://www.blackhat.com/us-23/briefings/schedule/index.html#all-you-need-is-guest-32647) | | | |\n| 2023-08-10 | BlackHat US Arsenal 2023 | [PowerGuest: AAD Guest Exploitation Beyond Enumeration](https://www.blackhat.com/us-23/arsenal/schedule/index.html#powerguest-aad-guest-exploitation-beyond-enumeration-33687) | | | |\n| 2023-10-31 | OWASP Global AppSec DC 2023 | [OWASP Low-Code No-Code Top 10](https://owasp2023globalappsecwashin.sched.com/event/1OUyz/owasp-low-code-no-code-top-10) | | | |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmbrg%2Ftalks","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmbrg%2Ftalks","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmbrg%2Ftalks/lists"}