Recent and Upcoming Public Talks & Workshops

2021

Talk - Purple Teaming with OWASP purpleteam
This talk covers: What is OWASP PurpleTeam? Why you would want it in your build pipelines. How you go about setting it up? What the work-flows look like.
Nov 12, 2021 12:00 PM — 13:00 PM Virtual Online
Project Interview Follow
Talk - Dev Team Security: Back to the Future
This talk visits: The past, present and future of how our Development Teams have and will measure the security maturity of the software delivered.
Nov 5, 2021 15:00 PM — 15:30 PM The Christchurch Arts Centre
Follow
Talk - Purple Teaming with OWASP purpleteam
This talk covers: What is OWASP PurpleTeam? Why you would want it in your build pipelines. How you go about setting it up? What the work-flows look like.
Oct 29, 2021 16:00 PM — 16:30 PM Virtual Online
Project Interview Follow
Talk - Purple Teaming with OWASP purpleteam
This talk covers: What is OWASP PurpleTeam? Why you would want it in your build pipelines. How you go about setting it up? What the work-flows look like.
Oct 27, 2021 17:30 PM — 20:30 PM The Loft 146a Lichfield Street - Christchurch
Project Interview Follow
Talk - Purple Teaming with OWASP purpleteam
This talk covers: What is OWASP PurpleTeam? Why you would want it in your build pipelines. How you go about setting it up? What the work-flows look like.
Sep 24, 2021 14:25 PM — Sep 25, 2021 14:55 PM Virtual Online
Project Interview Follow
Talk - Incident Response and Application Intrusion Detection
Talk by Chris and Kim on Incident Response and Application Intrusion Detection
Jun 30, 2021 19:00 PM — 21:00 PM Trineo Ltd
Talk PDF Slides
Workshop - Planning and Covid
Planning for this years Meetup sessions followed by a discussion on Covid
Mar 31, 2021 19:00 PM — 21:00 PM Christchurch, New Zealand
Workshop PDF Slides
Talk - Building PurpleTeam (a Security Regression Testing SaaS) - From PoC to Alpha
Developers / Engineers know that a build pipeline is an essential part of creating robust and reliable software, but what to put in it? This talk covers the creation of purpleteam from PoC to Alpha release, and why it’s an ideal fit for the security regression testing slot of your build pipeline.
Feb 12, 2021 14:25 PM — 14:55 PM Auckland University, New Zealand
Project Talk Blog Post Slides PDF Conference Talk Video Interview Follow

2017

Talk - Secrets of a High Performance Security Focussed Agile Team
At BSides Wellington: Kim discusses that Quality (security included) does not have to be neglected when you’re planning, building and running a high performance development team. He discusses how we fail and how to succeed.
Nov 23, 2017 16:00 PM — 16:30 PM Wellington, New Zealand
Talk Conference Talk Video
Conference - Christchurch Hacker Con
CHCon 2017: A conference for security professionals and hackers, based in Christchurch, NZ.
Oct 26, 2017 09:00 AM — Oct 28, 2017 18:30 PM Christchurch New Zealand
Workshop - Building Security Into Your Development Teams
Kim’s flagship Software Developer focussed training, this time at Christchurch Hacker Conference (CHCon).
Oct 25, 2017 09:00 AM — 17:30 PM Christchurch, New Zealand
Workshop Source Book Series Kim's other Workshops PDF
Talk - Secrets of a High Performance Security Focussed Agile Team
Kim discusses how and why Agile Development Teams fail at security, and how to stop failing.
Oct 24, 2017 16:30 PM — 17:00 PM Online
Talk Pre Con Interview Conference Talk Video Section of Kim's Book
Workshop - Web Developer Quiz Night
Attacking a set of carefully curated questions around info-sec, white hat, black hat, attack and defense.
Jun 28, 2017 19:00 PM — 21:00 PM Christchurch, New Zealand
Workshop Source Book Series PDF Slides
Conference - OWASP New Zealand Day
The eighth OWASP New Zealand Day conference, held at the University of Auckland.
Apr 20, 2017 09:00 AM — 17:00 PM Auckland New Zealand
Talk - The Art of Exploitation
At JS Remote Conf: Kim examines and demonstrates a collection of essential attacks, commonly used in the exploitation and demise of many individuals and organisations today.
Mar 15, 2017 14:15 PM — 15:00 PM Online
Talk Video Slides PDF
Talk - The Art of Exploitation
At NZ.JS: Kim examines and demonstrates a collection of essential attacks, commonly used in the exploitation and demise of many individuals and organisations today.
Mar 9, 2017 16:00 PM — 16:45 PM Wellington, New Zealand
Talk Video Slides PDF
Workshop - Developing a high-performance security focussed Agile Team

DevSecCon, Singapore: Quality (security included) does not have to be neglected when you’re planning, building and running a high-performance development team.

Kim will set the stage with how and why Agile development teams fail, explained with a familiar anecdote taken from his new book “Holistic Info-Sec for Web Developers”, coupled with how you can change this.
Feb 23, 2017 13:00 PM — 15:00 PM Singapore
Workshop Slides PDF Code Source Book Series
Workshop - Windows Exploitation and Persistence with PowerShell
Kim will walk us through a collection of PowerShell delivery (RAM, not disk) techniques for a common reverse shellcode.
Jan 25, 2017 19:30 PM — 21:00 PM Christchurch, New Zealand
Workshop Book Play Adding Persistence C/- PowerSploit

2016

Talk - Agile Security for Web Developers
Join Kim at AgileNZ 2016 for an exploration into an insightful set of steps he has learned, from an architectural, engineering and penetration testing perspective.
Nov 29, 2016 16:00 PM — 16:50 PM Wellington, New Zealand
Talk Source Book Series
Workshop - Holistic Info-Sec for Web Developers - Intense
Kiwicon hands-on threat modelling, attack and defence strategy training for Web Developers wishing to understand their attackers better, stay ahead of them and create cost effective defence strategies.
Nov 16, 2016 09:00 AM — 13:00 PM Wellington, New Zealand
Workshop Source Book Series
Conference - Christchurch Hacker Con
CHCon 2016: A conference for security professionals and hackers in Christchurch, NZ.
Nov 12, 2016 09:00 AM — 18:30 PM Christchurch New Zealand
Workshop - Security Regression Testing with ZapAPI and NodeGoat
At AWS Auckland, Kim will demonstrate the OWASP Zap API with NodeGoat, which helps you identify vulnerabilities in your web application as you create it, rather than at the end of a project.
Oct 28, 2016 17:30 PM — 21:00 PM Auckland, New Zealand
Workshop Source Book Series
Workshop - Security Regression Testing with ZapAPI and NodeGoat
NodeJS Auckland: Kim will demonstrate the OWASP Zap API with NodeGoat, which helps you identify vulnerabilities in your web application as you create it, rather than at the end of a project.
Oct 27, 2016 18:15 PM — 21:15 PM Auckland, New Zealand
Workshop Source Book Series
Workshop - Security Regression Testing with ZapAPI and NodeGoat
This time in Kilkenny of Ireland, Kim will demonstrate the OWASP Zap API with NodeGoat, which helps you identify vulnerabilities in your web application as you create it, rather than at the end of a project.
Oct 16, 2016 13:00 PM — 15:00 PM Kilkenny, Ireland
nearForm Announcement Source Book Series
Workshop - Holistic Info-Sec for Computer Science Students
This time for the students of University of Canterbury. An exploration into an insightful set of steps he has learned, from an architectural, engineering and penetration testing perspective. Based on the content of volume 0 & 1 of Kim’s new book “Holistic Info-Sec for Web Developers”. This time held at the University of Canterbury.
Sep 5, 2016 10:00 AM — 12:00 PM University of Canterbury, Computer Science dept, Christchurch, New Zealand
Source Book Series
Talk - Agile Security for Web Developers
Join Kim at Agile Professionals Network for an exploration into an insightful set of steps he has learned, from an architectural, engineering and penetration testing perspective.
Aug 18, 2016 18:00 PM — 20:00 PM Christchurch, New Zealand
Talk Source Book Series
Workshop - Security Regression Testing with ZapAPI and NodeGoat
This time in New York City at OWASP, Kim will demonstrate the OWASP Zap API with NodeGoat, which helps you identify vulnerabilities in your web application as you create it, rather than at the end of a project.
Jul 27, 2016 19:00 PM — 21:30 PM New York, USA
Workshop Source Book Series
Workshop - Holistic Info-Sec for Web Developers
Hackers On Planet Earth (HOPE) conference in New York City. An exploration into an insightful set of steps he has learned, from an architectural, engineering and penetration testing perspective. Based on the content of volume 0 & 1 of Kim’s new book “Holistic Info-Sec for Web Developers”.
Jul 23, 2016 10:00 AM — 12:00 PM New York City, USA
Workshop Source Book Series
Workshop - Security Regression Testing with ZapAPI and NodeGoat
Kim will demonstrate the OWASP Zap API with NodeGoat at the meetup he usually facilitates, which helps you identify vulnerabilities in your web application as you create it, rather than at the end of a project.
Jun 29, 2016 19:00 PM — 22:00 PM Christchurch, NZ
Workshop Source Book Series
Workshop - Security Regression Testing with ZapAPI and NodeGoat
At CHC.js Kim will demonstrate the OWASP Zap API with NodeGoat, which helps you identify vulnerabilities in your web application as you create it, rather than at the end of a project.
Jun 23, 2016 19:00 PM — 22:00 PM Christchurch, NZ
Workshop Source Book Series
Talk - Agile Security for Web Developers
Join Kim at CodeCamp Christchurch for an exploration into an insightful set of steps he has learned, from an architectural, engineering and penetration testing perspective.
Jun 18, 2016 10:00 AM — 11:00 AM Christchurch, New Zealand
Source Book Series
Workshop - Holistic Info-Sec for Web Developers
AusCERT hands-on threat modelling, attack and defence strategy training for Web Developers wishing to understand their attackers better, stay ahead of them and create cost effective defence strategies.
May 23, 2016 09:00 AM — 17:30 PM Surfers Paradise, Gold Coast, Australia
Workshop Source Book Series
Workshop - Tools, Password Profiling, Brute Forcing
Kim will take ISIG through the collection of tools added and configured on his penetration testing machine used throughout his book series (Holistic Info-Sec for Web Developers). Kim will then profile a well known celebrities password, creating a short-list, then (on-line) brute force their login. Come along, it’ll be fun.
Apr 27, 2016 19:30 PM — 21:00 PM Twisted Hop, 616 Ferry Road, Christchurch, New Zealand
Workshop Risks Countermeasures Book Play Video Slides
Conference - OWASP New Zealand Day
The seventh OWASP New Zealand Day conference, held at the University of Auckland.
Feb 4, 2016 09:00 AM — 17:00 PM Auckland New Zealand

2015

Workshop - Holistic Info-Sec for Web Developers
Kiwicon hands-on threat modelling, attack and defence strategy training for Web Developers wishing to understand their attackers better, stay ahead of them and create cost effective defence strategies.
Dec 9, 2015 09:00 AM — 17:30 PM Wellington, New Zealand
Workshop Source Book Series
Talk - Password Profiling, Brute Forcing
Kim talks with his fellow Toastmasters about profiling peoples passwords and then brute forcing web applications with the shortlist of guessed passwords..
Dec 4, 2015 07:00 AM — 07:07 AM Speight’s Ale House, Function Room, 263 Bealey Avenue, Christchurch
Risks Countermeasures Book Play Video
Talk - Infectious Media with Rubber Ducky
Kim talks with his fellow Toastmasters about the risks and countermeasures of luring targets to execute infectious media on their devices.
Nov 27, 2015 07:30 AM — 07:37 AM Speight’s Ale House, Function Room, 263 Bealey Avenue, Christchurch
Risks Countermeasures Slides
Talk - The Exploited & the Exploiters
Taking the perspective of the penetration tester hired in by the target to find the defects in their security defences before the cyber criminals do.
Sep 30, 2015 07:30 AM — 08:30 AM Christchurch, NZ
Demos on YouTube Slides Sourced from Kim's Book
Talk - 0wn1ng The Web
At Functional Christchurch, due to popular demand. Taking the perspective of the penetration tester hired in by the target to find the defects in their security defences before the cyber criminals do.
Sep 15, 2015 18:00 PM — 21:00 PM Christchurch, NZ
Demos on YouTube Slides Sourced from Kim's Book
Talk - 0wn1ng The Web
At Test Professionals Network Christchurch, due to popular demand. Taking the perspective of the penetration tester hired in by the target to find the defects in their security defences before the cyber criminals do.
Sep 8, 2015 18:00 PM — 21:00 PM Christchurch, NZ
Demos on YouTube Slides Sourced from Kim's Book
Talk - 0wn1ng The Web
At CHCH.js Christchurch, due to popular demand. Taking the perspective of the penetration tester hired in by the target to find the defects in their security defences before the cyber criminals do.
Jul 30, 2015 19:00 PM — 22:00 PM Christchurch, NZ
Demos on YouTube Slides Sourced from Kim's Book
Talk - 0wn1ng The Web
At WDCNZ: Kim discusses and demonstrates how JavaScript can be used for good and evil.
Jul 23, 2015 15:10 PM — 16:00 PM Wellington, New Zealand
Video Slides Demos on YouTube Sourced from Kim's Book
Talk - Does Your Cloud Solution Look Like a Mushroom
At Dot Net User Group, Christchurch, due to popular demand this presentation is being run again. Drawing from Kim’s recent blog post “Journey to Self Hosting” and many more resources for some high-level ideas about cloud solutions. Kim will discuss what’s good and what’s not good about “the Cloud”.
Jun 30, 2015 17:30 PM — 20:30 PM Christchurch, NZ
Slides Cloud Chapter Cloud Security Podcast
Talk - Does Your Cloud Solution Look Like a Mushroom
At OWASP meetup, Christchurch, due to popular demand this presentation is being run again. Drawing from Kim’s recent blog post “Journey to Self Hosting” and many more resources for some high-level ideas about cloud solutions. Kim will discuss what’s good and what’s not good about “the Cloud”.
Jun 24, 2015 19:00 PM — 22:00 PM Christchurch, New Zealand
Slides Cloud Chapter Cloud Security Podcast
Talk - Passwords 101
In this 5 – 7 minute talk, Kim demonstrates (hands on) how easy it can be to compromise passwords using a collection of techniques. Kim discusses how most developers are failing at keeping their end users safe.
Jun 5, 2015 07:30 AM — 07:37 AM Speight’s Ale House, Function Room, 263 Bealey Avenue, Christchurch
Slides Risks Countermeasures
Workshop - Holistic Info-Sec for Web Developers
At CampJS, Melbourne, Australia: Join Kim in the exploration into an insightful set of steps he has learned, from an architectural perspective down to the zeros and ones. Also providing insights of how attackers of your systems think.
May 24, 2015 13:00 PM — 15:00 PM Melbourne, Australia
Book Series Slides Kim at CampJS
Talk - Does Your Cloud Solution Look Like a Mushroom
Saturn Architect Conference, Baltimore, MD, USA: Drawing from Kim’s recent blog post “Journey to Self Hosting” and many more resources for some high-level ideas about cloud solutions. Kim will discuss what’s good and what’s not good about “the Cloud”.
Apr 29, 2015 16:00 PM — 16:30 PM Baltimore, MD, USA
Slides Cloud Chapter Cloud Security Podcast
Conference - OWASP New Zealand Day
The sixth OWASP New Zealand Day conference, held at the University of Auckland.
Feb 27, 2015 09:00 AM — 17:00 PM Auckland New Zealand