WWHF @ Mile High 2025

WWHF @ Mile High 2025

10:00am MST

Developing Better Payloads with Automated Testing Track 2 - PenroseNick McClendon Will It Run? Fooling EDRs With Command Lines Using Empirical Data Track 1 - Colorado BallroomWietze Beukema

11:00am MST

Social Engineering for Covert Access Assignments Track 1 - Colorado BallroomDorota Kozlowska The Hacker’s Guide to Risk Management: Evolve Into a Golden Unicorn Track 2 - PenroseJaclyn "Jax" Scott

1:00pm MST

Identifying New Attack Paths via Password Analysis Track 3 - Denver 5/6Esteban Rodriguez Jargon & Jigsaw – Shellcode Obfuscation Track 1 - Colorado BallroomMike Saunders LLMs for Vulnerability Discovery: Finding 0days at Scale With a Click of a Button Track 2 - PenroseDan McInerney • Marcello Salvati

1:30pm MST

Powering Up Linux: Unleashing PowerShell for Penetration Testing and Red Teaming Track 3 - Denver 5/6Tj Null

2:00pm MST

How I Used AI to Crush CTF Challenges and What I Learned Along the Way Track 3 - Denver 5/6Tabatha Kossman From Sore to SOAR: Reinventing Sentinel Automation Without Logic Apps Track 2 - PenroseHenri Hambartsumyan Hackventure: Having Fun With IDOR Attacks Track 1 - Colorado BallroomJoshua Wright

2:30pm MST

What I Learned From Building A Tabletop Security Exercise Track 3 - Denver 5/6Dwayne McDaniel

3:00pm MST

Solving Dumb Hacker Problems With Nix Track 3 - Denver 5/6Ryan Basden Effectively Detecting Modern Code Injection Techniques with Volatility 3 Track 2 - PenroseAndrew Case Encrypting buckets for compliance and ransom - How Attackers Can Use KMS to Ransomware S3 Buckets Track 1 - Colorado BallroomBleon Proko

3:30pm MST

Hacking Through the Weeds Track 3 - Denver 5/6Justin Watkins

4:00pm MST

OSINT Gone Wild: How I Found Drug Traffickers and Narco Terrorist Online Track 3 - Denver 5/6Schuyler Davis From Noise to Knowledge: Demystifying RF Signals Track 1 - Colorado BallroomTy Purcell Streamlining Pentest and Vulnerability Reporting with AI: A Remediation-Focused Approach Track 2 - PenroseDan DeCloss Streamlining Pentest and Vulnerability Reporting with AI: A Remediation-Focused Approach Track 2 - PenroseDan DeCloss

5:00pm MST

Packet Generation With Scapy Track 1 - Colorado BallroomWilliam Stearns The Tao and Te of Device Code Phishing Track 2 - PenroseAndrew Krug

9:00am MST

Breaking Free From the Chains of Fate - Bypassing AWSCompromisedKeyQuarantineV2 Policy Track 1 - Colorado BallroomBleon Proko The Extendables - Exploiting Browser Extensions for Privesc and Persistence Track 2 - PenroseFin Hume

10:00am MST

Detection Engineering is Hard; My Educational Failures That Proved to be Useful After All Track 2 - PenroseOlaf Hartong Social Engineering My Way Into Conferences Track 1 - Colorado BallroomFrank Trezza

11:00am MST

A Journey from Alert(1) to P1 (Cat Pic Graffiti and Phishing Payloads) Track 1 - Colorado BallroomCary Hooper MailFail: Spoof Emails in Seconds Track 2 - PenroseJack Hyland

1:00pm MST

2024: A Cyborg Odyssey Track 2 - PenroseLen Noe From User to Entra ID Admin Track 1 - Colorado BallroomSean Metcalf

1:30pm MST

Validation station: Using Atomic Red Team to Test your Defenses Track 3 - Denver 5/6

2:00pm MST

AI-Driven OSINT in the Hands of Cybercriminals Track 1 - Colorado BallroomJames McQuiggan Fusing Reverse Shells And Kernel Exploits For Fun & Profit Track 2 - PenroseAleksa Zatezalo

2:30pm MST

Validation station: Using Atomic Red Team to Test your Defenses Track 3 - Denver 5/6

3:00pm MST

Baselining For Bad Things With Surveyor! Track 1 - Colorado BallroomTre Wilkins Did You Knock Out Our [noun]? Track 2 - PenroseJack Verrier