29 Feb: Brucon Spring Training Update

Good evening all Just a quick update from the Brucon team on our Spring Training. We are quickly approaching our deadline for training attendees. If you’re looking to attend a class with us in April, please could you look at booking before the 20th of March. We’ve had to set a hard deadline as some of the classes could face cancellation due to low attendee numbers. Obviously we don’t want to do that unless it’s absolutely…

27 Jan: Trainer spotlight – Dawid Czagan/Hacking web applications

In a “guest post” Dawid Czagan explains a little more about what attendees can expect from his training… My hands-on training Hacking web applications – case studies of award-winning bugs in Google, Yahoo, Mozilla and more is unique, because it is based on real, award-winning bugs found in famous companies like Google, Yahoo, Mozilla, Twitter,… Students will learn how bug hunters think and how to hunt for security bugs effectively. To be successful in bug hunting, you need to go…

08 Sep: Two free tickets for the BruCON Security Conference

We are doing a special promotion. The first two following registrations for the Social Engineering (for Pentesters) Course will get a free ticket for the BruCON conference as well. You can find more details about this course here. You can listen to Sharon Conheady on the latest Eurotrash Security Podcast episode (mp3) where she explains why Social Engineering is important and how easy it is used.

26 May: Updates on BruCON 2010 Presentations and Workshops

If you weren’t sure about buying a ticket for BruCON, we updated our schedule page with updates on the BruCON 2010 presentations and workshops. A final schedule will appear by August but these are the details on the confirmed talks and workshops. BUT this is not all, there are few MORE things we have in mind for you and we will publish them in the next weeks. Let’s say we don’t want to spoil all…

12 Apr: Announcing 1st Workshop: Malicious PDF Analysis

Our ticket sales started a few weeks ago. Although our CFP is still running, we’ll start giving sneak peeks in the upcoming program of the 2010 BruCON edition. This might convince some of you to grab that ticket at early bird price since some of them are limited in number. With great pleasure we are announcing an exclusive workshop from Belgian security researcher Didier Stevens! And what better subject it could be then a workshop…

22 Mar: Announcing BruCON Training #5: Advanced Vulnerability Scanning Techniques Using Nessus by Paul Asadoorian (@pauldotcom)

Course abstract: This course teaches advanced scanning techniques by using a real-world scenario to demonstrate how these techniques help to solve problems in an example work environment. In this course you (or you and your team) will take on the role of a brand new security engineer for a financial company. You will be tasked with configuring and auditing a system to be used within your network environment. The system, and associated applications, make up…

16 Mar: Announcing BruCON Training #4: Assessing and Exploiting Web Applications with Samurai-WTF

Course abstract: This course will focus on using open source tools to perform web application assessments. The course will take attendees through the process of application assessment using the open source tools included in the Samurai Web Testing Framework Live CD (Samurai-WTF). Day one will take students through the steps and open source tools used to assess applications for vulnerabilities. Day two will focus on the exploitation of web app vulnerabilities, spending half the day…

08 Mar: Announcing BruCON Training #3: Social engineering (for pentesters)

In 2007, one of the biggest diamond robberies ever found place. The thief used no violence. He used one weapon — his charm — to gain confidence. He bought chocolates for the personnel, he was a nice guy, he charmed them, got the original of keys to make copies and got information on where the diamonds were. You can have all the safety and security you want, but if someone uses their charm to mislead…

04 Mar: Announcing BruCON Training #2: A crash course in pentesting and securing VOIP networks

BruCON is proud to announce this second training session. More training sessions will be published in the following days, so check back regularly.Abstract:As VoIP networks become more and more part of the way organizations communicate, security professionals need to understand their strengths and weaknesses. This knowledge will help them make sound decisions on the security (or lack of) of their VoIP system and network. Attendees who follow the VoIP security training will gain valuable hands-on…

04 Mar: Announcing BruCON Training #1: Pentesting High Security Environments

BruCON is offering for a second year some state of the art training sessions at an affordable price. The first training we announce is “Pentesting High Security Environments”. More training sessions will be published in the following days, so check back regularly. Abstract: This course will focus on penetration testing techniques that can be used when testing highly secured environments such as 3-letter agencies, DoD, financial organizations, federal organizations, and large companies. If you are…