Home
Talks
CFP Guide
What is BSides?
About
Contact
Light
← All talks
Tool
BSides talks featuring hashcat
105
talks mention this tool across
39
BSides chapters.
Talks featuring hashcat
47:55
BSides DC 2014 - Building and Using A GPU Password Cracker
Jonathan Fallone
BSides DC 2014
Technical
Cryptography
Talk
Open →
2014-10
28:27
Hack Yourself: Building a Test Lab - David Boyd
BSides Knoxville
Open →
2016-06
26:41
G1234! - Anatomy of NTLMv1/NTLMv1-SSP - Evil Mog
BSides Las Vegas
Open →
2018-09
50:41
G1234! - Abusing Password Reuse at Scale: Bcrypt and Beyond - Sam Croley
BSides Las Vegas
Open →
2018-09
50:12
Attacking JSON Web Tokens
BSides Canberra
· 2019
Technical
Cryptography
Red
Talk
Open →
2019-05
54:06
Password Cracking 201: Beyond the Basics
Royce Williams
BSides Las Vegas
· 2017
Technical
Cryptography
Talk
Open →
2017-08
54:25
G1234! - Sex, Secret and God: A Brief History of Bad Passwords - Kyle Rankin
BSides Las Vegas
Open →
2017-08
35:14
Introducing Pi-Key: Hacking just like the Movies
Jon Aubrey
Trevor Shingles
BSides London
· 2017
Technical
Red
Demo
Talk
Open →
2017-06
9:13:50
2016 BSidesLV - Paswords16 - Day Two
BSides Las Vegas
Open →
2016-08
50:19
Building an EmPyre with Python - Steve Borosh Alexander Rymdeko-Harvey, Will Schroeder
BSides Las Vegas
Open →
2016-08
24:36
The Security of Emojis
Adrian Justice
BSides Canberra
· 2021
Technical
Technical Deep-dives
Talk
Open →
2021-04
47:54
Password Cracking Beyond 15 Characters and Under $500
Travis Palmer
BSides Knoxville
· 2020
Research
Technical
Cryptography
Talk
Open →
2020-05
38:25
Ion Todd - Password Security for humans
BSides Cape Town
Open →
2016-12
22:50
BADPDF: Stealing Windows Credentials via PDF Files
Ido Solomon
Adi Ikan
BSidesSF
· 2019
Technical
Network Security
Vulnerability Research
Web AppSec
Red
Technical Deep-dives
Talk
Open →
2019-03
36:24
ICS Intrusion KillChain explained with real simulation
Juan Escobar
BSides Athens
· 2021
Technical
ICS Security
Intermediary
Red
Demo
Workshop
Open →
2021-06
47:44
G1234! - Optimizations for Bitcoin Key Cracking
BSides Las Vegas
Open →
2017-08
29:44
Password Cracking: The First 500 Million
Jamie Riden
BSides London
· 2019
Technical
Cryptography
Demo
Talk
Open →
2019-06
5:19:26
BSidesPDX 2025 - Saturday, Track 2
BSides PDX
· 2025
Open →
2025-10
40:27
The Insider - Users
Neil Lines
BSides London
· 2018
Technical
Active Directory
Talk
Open →
2018-06
1:07:30
BSIDESLV 2018 - Proving Ground - Day One
Erik Bryan
BSides Las Vegas
· 2018
Technical
Active Directory
Vulnerability Research
Talk
Open →
2018-08
47:47
The Hunt For The Red DA by Neil Lines
BSides Scotland
Open →
2017-04
46:06
Performance Hacking: Optimizing Cracking Tools with Rust
singe
BSides Cape Town
· 2023
Technical
Talk
Open →
2023-12
31:30
Keep it Like a Secret: When Android Apps Contain Private Keys
Will Dormann
BSidesSF
· 2018
Research
Cryptography
Mobile Security
Supply Chain Security
Case Studies and Incidents Analysis
Empirical Research
Talk
Open →
2018-04
56:17
BSides Glasgow 2018 - Nigel Pentland - Cracking Mainframe Passwords
BSides Scotland
Open →
2018-05
24:50
The Top 5 Ways I Own Your Internal Network
Heath Adams
BSides RDU
· 2019
Technical
Active Directory
Kerberos
Intermediary
Blue
Red
Demo
Talk
Open →
2019-10
40:05
Not-So-Secure-Print
Michael Spaling
Zoe Tomkow
BSides Edmonton
· 2018
Technical
Network Security
Physical Security
Red
Talk
Open →
2018-09
36:40
Hashcat and Survivorship Bias: Cracking uncommon passwords
Jon Rhodes
BSides Dallas/Fort Worth
· 2021
Technical
Red
Talk
Open →
2021-11
48:24
Cracking passwords for fun and profit - Chris Timmons
Chris Timmons
BSides Vancouver
· 2022
Technical
Cryptography
Red
Demo
Talk
Open →
2022-07
31:23
Your Passwords Should Be Shorter
Jeremy Brown
BSides Las Vegas
· 2022
Technical
Cryptography
Talk
Open →
2022-09
43:41
Are You a PenTexter? Open-Sourcing Pentest Reporting and Automation
Peter Mosmans
Melanie Rieback
BSides Las Vegas
· 2016
Technical
Tooling
Demo
Open →
2016-08
44:29
0xDEAD: Domain Exploitation and Domination
Jon Milkins
Bsides CT
· 2025
Technical
Active Directory
Threat Modeling
Intermediary
Red
Case Studies and Incidents Analysis
Talk
Open →
2025-12
24:59
September 2015 Lab - Password Cracking
BSides Peru
· 2015
Technical
Cryptography
Intermediary
Workshop
Open →
2015-09
31:17
WCTF Magic as told by a clumsy Magician
Timothy Allmon
BSides DC
· 2016
War Stories
Wireless Security
Red
Talk
Open →
2016-10
46:05
The Hashcat Chronicles: Cracking Passwords Like a Pro
Jon Milkens
BSides Charleston
· 2024
Technical
Cryptography
Red
Talk
Open →
2024-11
18:50
The Top 5 Ways I Own Your Internal Network
Heath Adams
BSides Charleston
· 2019
Technical
Active Directory
Kerberos
Network Security
Red
Talk
Open →
2019-11
43:36
The Count's A-to-Z of Windows Privilege Escalation
Lukasz Gogolkiewicz
BSides Canberra
· 2018
Technical
Active Directory
Red
Talk
Open →
2018-08
36:07
Attacking .NET Web Services
Ryan Wincey
BSides Charleston
· 2022
Technical
Talk
Open →
2022-11
18:14
Make Red Teaming Fun Again
Redon Gashi
BSides Prishtina
· 2022
Technical
Active Directory
OSINT
Social Engineering
Red
Talk
Open →
2022-05
26:50
Survival of the Fittest: Password Edition!
Kevin Neely
BSides PDX
· 2018
Technical
Blue
Talk
Open →
2019-02
43:45
Attackers Perspective: A Technical Demonstration of an Email Phishing Attack
Zac Davis
BSides Philly
· 2016
Technical
Red
Demo
Open →
2016-12
1:01:32
2016 - Jerome Smith - From CSV to CMD to qwerty
BSides Manchester
Open →
2016-09
53:42
Turning Domain Data into Domain Intelligence
Chris Partridge
BSidesROC
· 2018
Technical
Talk
Open →
2018-04
41:22
Blue About Not Being Red? How to Be More Offensive
Tim Medin
BSides KC
· 2019
Career
Kerberos
Talk
Open →
2019-06
47:51
Neven Biruski | Password123!
BSides Zagreb
Open →
2025-03
24:06
I Love my BFF (Brute Force Framework) - Kirk Hayes
BSides Las Vegas
Open →
2016-09
1:54:16
BsidesLV 2025 - PasswordsCon - Wednesday
BSides Las Vegas
Open →
2025-08
47:07
Crafting tailored wordlists with Wordsmith - Sanjiv Kawa, Tom Porter
BSides Las Vegas
Open →
2016-08
6:06:45
BSides Delaware 2017 - Day 2
Alex Rubin
BSides Delaware
· 2017
Technical
Active Directory
Reverse Engineering
Tooling
Red
Talk
Open →
2017-11
38:15
2016 - Michael Jack - Ensuring Password Cracking Ain’t Easy REDUX
BSides Manchester
Open →
2016-09
46:03
Why You Need To Be Red Team'ed
Nate McConnell
BSides SLC
· 2015
Technical
Red
Talk
Open →
2015-04
25:35
Low Hanging Blue Fruit: Defending With Open-Source Tools
Yaron King
BSides TLV
· 2019
Technical
Blue
Talk
Open →
2019-11
45:27
How I Met Your Password
Dimitri Fousekis
BSides Las Vegas
· 2018
Technical
Vulnerability Research
Wireless Security
Red
Talk
Open →
2018-09
45:49
Scan Pwn Next! – exploiting service accounts in Windows
Andrey Dulkin
Matan Hart
BSidesSF
· 2016
Technical
Active Directory
Kerberos
Vulnerability Research
Red
Talk
Open →
2016-04
31:41
Evil Mog: From Print Spooler to Kerberos Silver Tickets
BSides Calgary
· 2020
Technical
Kerberos
Intermediary
Red
Talk
Open →
2020-12
40:24
Deductive Reasoning: File Analysis Techniques
John Laycock
Chris Rogers
BSides DC
· 2015
Technical
DFIR
Malware Analysis
Intro
Talk
Open →
2015-11
29:14
JWT Parkour
Louis Nyffenegger
BSides Toronto
· 2023
Technical
Cryptography
Web AppSec
Red
Workshop
Open →
2023-11
39:56
Red Team infrastructure and payload development automation
André Lima
BSides Oslo
· 2023
Technical
Advanced
Red
Talk
Open →
2025-07
41:47
The World is Y0ur$: Geolocation-based Wordlist Generation with Wordsmith
Tom Porter
Sanjiv Kawa
BSides DC
· 2017
Tooling
Talk
Open →
2017-10
42:48
The One With The Foreign Wordlist
Dimitri Fousekis
Ethan Crane
BSides Las Vegas
· 2022
Technical
Red
Talk
Open →
2022-09
43:54
Zachary Hunsaker - Open Source Intelligence: What Does the Internet Know About You?
BSides Knoxville
Open →
2023-05
29:50
Harvesting Low-Hanging Fruit in Red Teaming Exercises
Nick Kapellos
BSides Athens
· 2024
Technical
Active Directory
Kerberos
Vulnerability Research
Red
Talk
Open →
2024-03
37:13
Wild Wild Web App to Domain Admin: A Case Study
Nacho Sorribas
BSides Lisbon
· 2017
Technical
Active Directory
Web AppSec
Case Studies and Incidents Analysis
Talk
Open →
2017-11
43:27
Think Complex Passwords Will Save You?
Ian Foster
David Hulton
BSides Las Vegas
· 2017
Technical
Cryptography
Network Security
Reverse Engineering
Red
Talk
Open →
2017-08
59:02
My Pen Test Toolbox
Octavio Paguaga
BSides NoVa
· 2021
Technical
Active Directory
Kerberos
Threat Intel
Red
Talk
Open →
2021-07
43:38
Passwords: Policies, Securing, Cracking, and More
Derek Melber
BSides Las Vegas
· 2023
Technical
Active Directory
Kerberos
Talk
Open →
2023-10
40:55
Passwords 101: A Five-Year Journey Cracking 1576 DES Crypt Hashes
Jeff Deifik
BSides Las Vegas
Technical
Cryptography
Vulnerability Research
Red
Talk
Open →
2024-09
43:49
The Monica Bellucci Fanclub - Detection and Defense Lessons Learned from the Trickbot Forum
Jason Killam
BSides KC
· 2022
Technical
Blue
Talk
Open →
2022-10
18:17
Top Ways I Still Hack Your Company (and How to Defend Against Them)
Bennett Warner
BSides Charm
· 2024
Technical
Active Directory
Network Security
Vulnerability Research
Web AppSec
Red
Talk
Open →
2024-06
21:06
Asymmetric Impact: Adventures in funding infosec research
Dean Pierce
BSides PDX
· 2024
Talk
Open →
2024-11
29:46
BSidesSLC 2020 - Carrie Roberts, Darin Roberts, Cameron Roberts - The Domain Password Audit Tool
BSides SLC
Open →
2020-03
41:45
Unleashing AI and Large Language Models in Offensive Security
Martin Ingesen
BSides Oslo
· 2023
Technical
Red
Talk
Open →
2025-07
42:59
Icebreaker: From internal jumpbox to domain admin in one command
Dan McInerney
BSides SLC
· 2018
Technical
Active Directory
Kerberos
Red
Talk
Open →
2018-12
56:22
The Case for Password Auditing in Enterprise
Doug Burns
Nik Whitis
BSides Cincinnati
· 2017
Technical
Talk
Open →
2017-05
33:54
EDR Evasion 101 in a Professional Hacker Red Team
André Lima
BSides Kristiansand 2026
Technical
Detection Engineering
Reverse Engineering
Advanced
Red
Talk
Open →
2026-02
45:04
Plundering and Pillaging Password and Passphrase Plains for Profit
Will Hunt
BSides Leeds
Technical
Cryptography
Intermediary
Red
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2025-08
55:24
What I Wish I Knew About Password Auditing: Cracking User's Passwords before the Bad Guys
Ben Tice
BSides Delaware
· 2019
Technical
Active Directory
Vulnerability Research
Blue
Talk
Open →
2019-11
17:24
SAPPIN' The Enterprise: Breaking What No One Else Pentests
Jonathan Pake
BSides London
· 2025
Technical
Vulnerability Research
Web AppSec
Red
Talk
Open →
2026-03
27:50
Cats, Cats & Moar Katz: Windows Post Exploitation
Alex Reuben
BSides Delaware
· 2017
Technical
Talk
Open →
2017-11
27:56
So You Cracked a Bunch of Passwords. Now What?
Chris Timmons
BSides Vancouver
· 2021
Technical
Tooling
Talk
Open →
2021-06
21:54
Breaking Down Walls With Windows
Alexander Klepal
BSides SATX
· 2020
Technical
Red
Talk
Open →
2020-08
53:15
Here We Go Again: A Pentester's Year in Review
Tyler Wrightson
BSidesROC
· 2017
War Stories
Active Directory
Reverse Engineering
Web AppSec
Talk
Open →
2018-01
30:58
Setting up a lab
William Price
Bill Price
BSides Charlotte
· 2019
Open →
2019-11
16:59
Reversing F5 Service Password Encryption
Dustin Heywood
BSides Las Vegas
· 2025
Technical
Cryptography
Reverse Engineering
Red
Talk
Open →
2025-12
30:10
CG - Backdooring MS Office Documents with Secret Master Keys - Shigeo Mitsunari & Yoshinori Takesako
BSides Las Vegas
Open →
2016-12
28:06
Confused deputy problem for databases: a method for privilege escalation in MySQL and PostgreSQL
Alexander Rubin
BSides RDU
· 2022
Technical
Red
Talk
Open →
2023-03
26:23
PW - What Would Fix Passwords? Some Weekly Password Audits. Pretty Graphs to Prove it! (A Haiku) - D
BSides Las Vegas
Open →
2016-12
28:57
Assumed Breach: A Better Model for Pen Testing
Mike Saunders
BSides KC
· 2019
Technical
Active Directory
Kerberos
Threat Intel
Red
Talk
Open →
2019-06
33:54
BSidesSF 2015 - Your Users Passwords Are Already Stolen (Lucas Zaichkowsky)
Lucas Zaichkowsky
BSidesSF
· 2015
Technical
Cryptography
Talk
Open →
2023-12
45:05
Detecting the Elusive: Active Directory Threat Hunting
Sean Metcalf
BSides Charm
· 2017
Technical
Active Directory
Detection Engineering
Kerberos
Blue
Technical Deep-dives
Talk
Open →
2021-05
58:53
Pwning For Plaintext: A Hashcat 2.0 Adventure
Will Hunt
BSides Cambridge
· 2024
Technical
Cryptography
Advanced
Red
Talk
Open →
2024-01
21:42
Not Your Grandpa's Password Policy
Kevin T Neely
BSides Las Vegas
· 2018
Technical
Active Directory
Blue
Talk
Open →
2018-09
52:08
G1234! - My quest for (privileged) identity to own your domain - Nir Yosha
BSides Las Vegas
Open →
2019-10
22:49
Top 5 Ways I Own You Internal Network
Heath Adams
BSides Charlotte
· 2019
Technical
Talk
Open →
2019-11
49:55
Auditing Security of Browser-Based Password Generators
Aaron Toponce
BSides SLC
· 2021
Technical
Talk
Open →
2021-12
25:01
Wrangle Your Defense Using Offensive Tactics
Matt Dunn
Bsides CT
· 2019
Technical
Blue
Talk
Open →
2019-11
41:35
How to Find a Companys BreakPoint
BSides Philly
Open →
2017-08
43:08
Unleash the Hash Master
Qasim Ijaz
BSidesROC
· 2024
Technical
Active Directory
Kerberos
Talk
Open →
2025-03
46:42
So… You want to build your own hacking device…
Alex Thines
BSides Las Vegas 2025
Technical
Hardware Hacking
IoT
Wireless Security
Intro
Red
Talk
Open →
2025-12
48:12
Password Cracking in AD: The Fun Part of Compliance
Matthew Saulnier
BSides Las Vegas
· 2023
Technical
Active Directory
Vulnerability Research
Blue
Red
Talk
Open →
2025-12
21:31
Password Expiry is Dead: Real-World Metrics on What Rotation Actually Achieves
Dimitri Fousekis
BSides Las Vegas
· 2025
Research
Case Studies and Incidents Analysis
Empirical Research
Talk
Open →
2025-12
39:02
The HMAC Trap: Security or Illusion?
Marluan Cleary
BSides Las Vegas
· 2025
Technical
Cryptography
Red
Talk
Open →
2025-12
43:03
Cracking 936 Million Passwords
Jeff Deifik
BSides Las Vegas
Technical
Cryptography
Talk
Open →
2025-12
26:01
PG - How I Learnt Hacking in High School - Lokesh Pidawekar
BSides Las Vegas
Open →
2016-12
12:51
Life's a Breach: Modern Data Breach Reporting with Sencode Breaches
Gareth Kerr
BSides Newcastle
· 2020
Research
Tooling
Talk
Open →
2020-11
20:38
SolarWinds Post-Exploitation for Red Teams (and Fun)
James Donlon
BSides Charlotte
· 2026
Technical
Vulnerability Research
Advanced
Red
Technical Deep-dives
Talk
Open →
2026-04
