Hack In The Box Security Conference Courses

Attacking WPA3 - New Vulnerabilities And Exploit Framework

Uncovers critical vulnerabilities in WPA3, including DoS attacks and traffic interception. Presents a new Wi-Fi testing framework for researchers to identify and exploit these weaknesses in various devices.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Random Walk Through A Few Million Things

Explore IoT security challenges in enterprises, examining millions of devices to reveal vulnerabilities, default credentials, and outdated firmware. Gain insights into the current state of IoT security.

• YouTube
• 1 hour 8 minutes
• Self-Paced
• Conference Talk

Exploiting Race Condition Vulnerabilities in Web Applications

Explore race condition vulnerabilities in web apps, their impact, and exploitation techniques. Learn about detection challenges, real-world scenarios, and a new penetration testing tool for identifying these elusive security flaws.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Getting Clear Text Passwords From An IdP & More

Explore privilege escalation in Okta, including methods to obtain clear text passwords and impersonate super-admins. Learn about knowledge graphs for trust analysis in vulnerability discovery and research collaboration.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Advanced Code Obfuscation With MBA Expressions

Explore advanced code obfuscation techniques using Mixed Boolean-Arithmetic expressions to increase data-flow complexity and conceal sensitive data, with practical applications in building robust obfuscation primitives.

• YouTube
• 1 hour 52 minutes
• Self-Paced
• Conference Talk

Cracking Kyocera Printers

Explore vulnerabilities in Kyocera printers, including remote DoS, file reading, password leakage, and pre-auth RCE. Learn how these security flaws can be exploited to access office networks and monitor confidential documents.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Simulating Execution in Malicious Text Detection

Innovative approach to malicious text detection using simulated execution, combining static and dynamic analysis techniques for improved accuracy and efficiency in identifying obfuscated threats.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Web3 + Scams = It's A Match

Explore 35+ types of cryptocurrency scams, from traditional replicas to novel Web3-specific schemes. Learn about pump and dump, rug pull, and unique scams like proof of weak hands and NFT airdrops.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Template Injection on Hardened Targets

Explore advanced template injection techniques for hardened Python and JavaScript environments. Build custom tools to tackle increasingly complex challenges in containerized web applications.

• YouTube
• 1 hour 33 minutes
• Self-Paced
• Conference Talk

Building an Army of Bots by Hijacking a Twitter Handle

Revealing security vulnerabilities in mobile apps that expose Twitter API keys, allowing potential account takeovers and unauthorized actions. Explores causes, impacts, and prevention techniques.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Faking at Level 1 - How Digital Twins Save Your PLCs

Explore digital twin technology for safely testing and identifying vulnerabilities in industrial control systems without risking operational infrastructure.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

API Security Through External Attack Surface Management

Integrating APIs into External Attack Surface Management to improve security posture. Discover and assess exposed assets, including APIs, for better protection and risk mitigation.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Hack In The Studio - Fireside Chat

Fireside chat with security experts Cristofaro Mune and Adam Laurie, discussing their extensive experience in hardware hacking, embedded systems security, and reverse engineering techniques.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Hack In The Studio - Fireside Chat

Fireside chat with cybersecurity experts Stefano Zanero and Marco Balduzzi, discussing their research, experiences, and insights in malware analysis, cyberphysical security, and emerging threats in the digital landscape.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

WIFI Security - From 0 To 1

Comprehensive guide to WiFi vulnerabilities, covering protocol basics, attack surfaces, and auditing techniques. Includes real-world examples and introduces a custom WiFi protocol stack fuzzer.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk