Bishop Fox is proud to sponsor and present at BSides CDMX in Mexico City, Mexico on July 19, 2024. BSides CDMX is the Mexico City's chapter where local and world-wide infosec professionals, researchers, engineers, developers, students are encouraged to educate, collaborate and participate with the community by exchanging ideas, knowledge and experience.

Bishop Fox experts will host a Lock Picking Village, Social Engineering - Vishing Village, as well as speak on two different topics, "Post-Exploitation Techniques Used by Threat Actors in Cloud" and "Leaving Doors Unlocked with Cognito." 

For more information, visit the BSides CDMX website.

Lock Picking Village

Hector Cuevas Cruz and Rodrigo Zacatelco will inspire and mentor new talent as part of of a Lock Picking Village by Pwntacles. The Village aims to raise public awareness about the physical security of lock and padlock mechanisms, where each participant will be taught and demonstrate techniques that they themselves can try.

Social Engineering - Vishing Village

Berenice Flores and Ivan Sanchez will host the Social Engineering - Vishing Village. The Village aims to raise public awareness about social engineering and prompt injection attacks where each participant will have to talk to our operator and try to obtain as much information as possible, to obtain the flags.

"Post-Exploitation Techniques Used by Threat Actors in Cloud" Session

Speakers: David Bravo & Samanta Aranda

Abstract: I have found AWS Cognito much more common in my targets and as a vector to compromise applications deployed in AWS. This talk will review what AWS Cognito is, what are some common misconfigurations, and how to exploit those misconfigurations as an external or internal attacker. Terraform templates will be provided for attendees to deploy some of these vulnerable situations and do hands on learning on their own time.

"Leaving Doors Unlocked with Cognito" Session

Speakers: Ivan Sanchez

Abstract: We will share an analysis of the tactics, techniques and procedures of toolkits created by TeamTNT and used by adversaries in different campaigns focused on the exploitation of cloud infrastructure and containers. These toolkits use interesting TTPs that have been replicated in recent campaigns and show a level of sophistication rarely seen in crypto jacking groups.