BSides Prishtina

29/10/2024

InfoSec Meetup @ Prishtina Hackerspace!

Calling all cybersecurity enthusiasts and hackers out there!

We’re excited to invite you to our next hashtag Meetup, happening on Wednesday, 30 October, at 17:30 in hashtag Hackerspace. Whether you’re a pro in the field or just curious about cybersecurity, this is the perfect chance to connect, learn, and share insights.

We’ll be focusing on various technical security talks! Here’s a preview of the talks lined up for the evening:

"Zero to Global Admin" - Arben Shala

"AWS Attack&Defense Lab" - Armela Elezaj, Andi Ahmeti & Abian Morina

"Escalating Privileges: Dissecting the Polkit pkexec Vulnerability (CVE-2021-4034)" - Milot Shala

Mark your calendars and don’t miss out! See you there!

Event details:
https://lnkd.in/d2W6VBgG

23/05/2023

Still not enough of BSides Prishtina 2023? You can find pictures that captured your favorite moments here: https://drive.google.com/drive/folders/1TOpD8AR2-FdBZM9YE8yAWGQA8SM0K8un

10/05/2023

And it's a wrap, BSides Prishtina 2023 is over!

Throughout two days of talks, workshops and a capture the flag (CTF) competition, we have wrapped our second edition with more speakers, very interesting talks and workshops and new friends from all over the world.

We would like to thank each of the attendees, speakers, trainers, volunteers and the organizing crew for making this an unforgettable experience.

In the next coming days we will publish more pictures from the conference, including video talks.

Happy hacking and see you next year!

04/05/2023

A special thank you goes to PentesterLab for offering vouchers for our CTF prizes and also additional vouchers for a raffle game that will be announced soon!

Don't forget to register as a team for the CTF and go through the rules and details at https://lnkd.in/gDaH_6dZ.

See you there, BSiders :)

03/05/2023

GET READY FOR THE CTF!

The registration is open and the CTF is taking place on Saturday May 6 starting from 9AM until 5PM CEST: ctf.bsidesprishtina.org

Rules: ctf.bsidesprishtina.org/rules

FlipperZero devices, PentesterLab and Hack The Box (EU) vouchers as prizes!

03/05/2023

We have added a last-minute workshop for Saturday morning on OAuth pen-testing, where Fatlum Fazliu will provide participants with a deep understanding of the security implications of the OAuth protocol. The workshop covers various topics, including different OAuth flows, security concerns, best practices, and advanced topics such as OAuth 2.1. In addition, the workshop includes hands-on exercises that enable participants to practice identifying and exploiting potential security vulnerabilities.

Registration for the workshop is open at https://lnkd.in/gn884Bu9

03/05/2023

is taking place once more at Universiteti i Prishtinës "Hasan Prishtina", this time at a different and bigger venue, at FIEK (Faculty of Electrical and Computer Engineering).

We would like to publicly thank Universiteti i Prishtinës "Hasan Prishtina" and FIEK for hosting us this year, in particular the dean Prof. Dr. Isak Shabani and Prof. Dr. techn. Blerim Rexha.

More information on the venue can be found at the following URL https://lnkd.in/dN9uZzvn

Schedule and speakers can be found at
https://lnkd.in/dMiPVkpn.

Excited to see you there!

03/05/2023

Registration for the Red Teaming with Sliver for May 5 is now open and you can grab your ticket at https://lnkd.in/ea7faMPX

This workshop has a limited number of 20 people, so please register and be there. You can also join the waitlist in case someone decides not to come or attend the workshop.

All you need for the workshop is a computer with a Linux distro or a Linux virtual machine.

Be there to join Timothy's and Vinnie's workshop on .

Next in line, with a four-hour workshop, are Timothy Makram Ghatas and Vanhoecke, both from Bishop Fox .

During the Sliver workshop class you will discover Sliver, an open-source Golang adversary emulation framework, and use it in a lab-environment to discover its capabilities. You will learn how to successfully stage sliver payloads using custom or Metasploit stagers, discover the different enumeration and exploitation capabilities the framework supports and learn how to camouflage your egress traffic and implement additional implant automation. The trainers will also share some field-notes on its usage and various tips and tricks to become a more effective operator.

03/05/2023

Registration for the Fuzzing Fundamentals Workshop is now open at https://lnkd.in/epamcaFT!

Required:
- A computer, preferably with a Linux distro or a Linux VM.

See you there :)

Roland Sako from Kaspersky is next in line with a four-hour workshop about fundamentals.

In this hands-on workshop, attendees will learn the fundamentals of fuzz testing, a powerful technique for finding bugs and vulnerabilities in software. We will explore core concepts such as mutation, code coverage, and instrumentation and apply these techniques to real-world software.

We will write our own fuzzes in Python against open-source and black-box targets. We will also learn how to use popular fuzzing tools such as AFL and libfuzzer.

By the end of the workshop, attendees will have a good foundation in fuzz testing and will have gained some practical experience in applying these techniques.

02/05/2023

The final date for BSides Prishtina is approaching and we would like to kindly ask you to grab your ticket for free at https://lnkd.in/d35GNZG3

This will allow us to better prepare our logistics, especially around catering.

The entry is free, and we will providing free food and drinks during our two days conference, so please register and spread your word among your friends and colleagues.