ATLSECCON 2025

Offensive security plays a crucial role in cybersecurity by identifying and exploiting system vulnerabilities. However, current practices often contain gaps that diminish the effectiveness of these assessments. This presentation will examine these gaps and provide strategies to optimize offensive security efforts.

I recently wrote a phishing tool for the ESP32 to educate others on exactly how cheap and easy it would be to get a device like this running. All of the parts can be ordered for less than $15 online, and in less than a couple days a Phisher could be deployed. In my talk I am going to cover the dangers that this kind of technology poses, how easy it is to create and deploy, the worst threat cases, and most importantly how we can avoid and eventually put an end to them.

These are important topics to cover because it brings attention to the surprisingly low barrier to entry into the ever growing cyber crime industry and how malicious devices like these can be scattered around, causing a wide variety of damage. The obvious first step in stopping this kind of cyber attack is understanding how it works, after can start on the second step, locating the devices to physically shut down them down.

This talk offers insights from head to tail, analyzing every aspect of these micro cyber attacks which are becoming more and more prevalent in our modern age.

Artificial Intelligence (AI) has revolutionized industries, but its vulnerabilities have also opened a new frontier for sophisticated cyberattacks. Among these, AI data poisoning and AI-enabled offensive cyberattacks stand out as potent threats capable of undermining the very systems designed to protect us. In this session, we will unravel the dark art of exploiting AI systems, showcasing how attackers manipulate training datasets, deploy deceptive inputs, and weaponize generative AI to compromise security at an unprecedented scale.