WallArm sponsors May 2026 NAC-ISSA lunch
2026-05-19 11:30 - 12:30 (America/Chicago) | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
TOPIC: Business Logic Abuse: Technology Agnostic Mapping of Attack Types

OWASP’s technology specific top 10 lists have provided a ton of value, but it’s time for a different approach to business logic abuse. The rise of APIs and complex business logic attacks requires a new taxonomy that isn’t tied to a specific technology.

Our Speaker is Johanns Quiroz. Johanns Quiroz is a seasoned cybersecurity and technology professional with over two decades of experience helping organizations design, secure, and scale modern digital environments. Currently serving as a Sr. Sales Engineer at Wallarm, Johanns supports customers across the Southeast, LATAM, and Caribbean, where he focuses on application and API security, pre-sales strategy, and partner enablement. Prior to Wallarm, he held senior technical sales and engineering roles at Horizon3.ai, where he specialized in offensive security and helping organizations proactively identify and mitigate risk. Johanns also brings deep expertise in enterprise infrastructure, having spent over 20 years as a solutions architect designing complex environments across storage, virtualization, and cloud technologies. Known for his consultative approach and ability to bridge business and technical stakeholders, Johanns is passionate about helping organizations stay ahead of evolving cyber threats while enabling innovation and growth.

Catering for the May chapter lunch is by Rosies and we have 2 door prizes! First is a Faraday laptop backpack and second is a set of Faraday bags.

OWASP BLA Top 10Download

Tech Thursday: Bypassing MFA with evilginx2
2026-05-21 18:00 - 20:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
NAC-ISSA and DC256 will be hosting the next Tech Thursday on May 21 with Tativ presenting ” Cookie Monster Ops: Bypassing MFA with evilginx2″.

This event is free to anyone wishing to attend. Pizza and softdrinks served. This is a hands on event so please bring your own laptop.

Before the workshop, attendees should be comfortable with Linux command line (SSH, package install, basic shell), basic DNS and domain management (A records, nameservers) and VPS management. (We will still cover this.), and be familiar with HTTP(S) concepts, TLS/Let’s Encrypt, and browser extensions.

Before the workshop, attendees will need to: Create a Digital Ocean account if you don’t already have one. Obtain a domain from Namecheap.com (It does not matter what the domain is.) Download Firefox, and download the Cookie-Editor extension for Firefox: https://addons.mozilla.org/en-US/firefox/addon/cookie-editor/

Information for tonight’s session:

Attendees will need Docker installed on their machine.

Windows:

Install WSL by opening command prompts as administrator and using the command “wsl –install”

Follow this guide to install Docker Desktop. There are also walkthroughs on YouTube.

https://docs.docker.com/desktop/setup/install/windows-install

Mac:

Similarly to Windows, follow this guide to install Docker Desktop. It’s a pretty straight forward install:

https://docs.docker.com/desktop/setup/install/mac-install

Linux: For Linux, you have 2 options and either will work.

Download Docker Desktop:

https://docs.docker.com/desktop/setup/install/linux

Or Download Docker Engine via Command line:

https://docs.docker.com/engine/install

Next, download my custom Evilginx application from Github: https://github.com/DillonGriffin/dc256-evilginx-student If you would like to give it a test run, unzip the folder, Build, then Deploy.

Tech Thursday - Cracking the Code: Passwords, Hashes and the Tools that Break Them
2026-06-18 18:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
🔐 **Cracking the Code: Passwords, Hashes & the Tools That Break Them** @everyone **🗓️ TOMORROW — Thursday, June 18 · 6:00–8:00 PM****📍 GigaParts Classroom***DC256 × NAC-ISSA Tech Thursday · presented by Christian Clark*Ever wonder how passwords are actually stored — and why some fall in **seconds** while others hold out for **centuries**? In this hands-on session we’ll go from *”what even is a hash?”* to cracking real (synthetic!) hashes with the same tools the pros use: **John, Hashcat, Hydra, CeWL** . Then you’ll put it to work in **🏴 Hash Heist**, our live-leaderboard CTF.No experience required — we start from zero and build up. Beginners and seasoned folks both have a lane.**🎯 You’ll learn to:**• Tell hashing from encryption (and from encoding)• Spot MD5 / SHA / NTLM / bcrypt and rank them by crack-resistance• Pick the right attack — dictionary, rules, masks, hybrid, online guessing• Build a targeted wordlist, and map every attack to a **defense****💻 Bring a laptop + do this setup TONIGHT** 🙏It’s a **~1.2 GB download** (unpacks to ~5 GB on disk), so grab it on **home wifi** — the classroom wifi won’t be happy with everyone pulling it at once. You’ll need **Docker Desktop** (Win/macOS/Linux) → https://www.docker.com/products/docker-desktop/ and ~8 GB free.“`bashgit clone https://github.com/bytetheio/crackstationcd crackstationdocker compose pulldocker compose up -d vuln-logindocker compose run –rm crackstation“`If you land at a prompt with a **crackstation** banner, you’re ready ✅ — type `exit`. *(Apple Silicon Macs: it runs under emulation, which is expected.)***🏁 Day-of links**• 🏆 Submit flags / live leaderboard → **https://board.0byte.sh**• <:happy_cookie:675372940572885043> Get to Hack Dillon’s Cookie Shop → **https://cookies.0byte.sh****⚖️ 100% legal & safe:** everything runs against **synthetic data we made up** — toy hashes, fake users, deliberately weak passwords. No real accounts.Come crack some hashes, climb the leaderboard, and walk away a sharper defender. See you tomorrow at GigaParts! 🍪🚩If you have any issues, please review https://github.com/bytetheio/crackstation.

More details found on the DC256 Discord page: https://discord.com/channels/741877434592395384/741886258388926494

This is our sixth monthly Tech Thursday for 2026. After this month, they will be less frequent so don’t miss you chance to attend this event! We will meet at Gigaparts for this free event. Pizza and softdrinks are served.

Beers for Engineers with AMG Defense Tech
2026-06-25 17:30 - 19:30 | InnerSpace Brewing, 2414 Clinton Ave W, Huntsville, 35805-3014, United States
Join the North Alabama Chapter of ISSA and our sponsor AMG (Alabama Media Group). We’ll run this event from 5:30 to 7:30 at InnerSpace Brewing. Come join us to meet new friends on Thursday, June 25.

AMG is also providing a door prize for one lucky attendee… a bottle of bourbon!
