Hack In The Box Security Conference Courses

Surveillance Is Not The Answer; What Is The Question?

Explores internet-era challenges like misinformation and surveillance, critiquing increased monitoring as a solution. Proposes alternative approaches for hackers and security experts to address these complex issues.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Payload Delivery for Initial Access in Red Team Engagement

Explore advanced payload delivery techniques for initial access in red team engagements, focusing on overcoming limited attack surfaces and bypassing security measures.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Attacking Storage Services - The Lynchpin of Cloud Services

Explore cloud storage vulnerabilities and attack techniques, focusing on enumeration, identification, exploitation, and post-exploitation strategies for various cloud services.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Optimizing the Protection of IoT Devices

Optimizing IoT device protection through innovative blacklist creation and evaluation. Proposes the Attacker IP Prioritizer algorithm and a standardized methodology for assessing blacklist effectiveness in resource-constrained environments.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Enterprise Security Strategy Leveraging on Zero Trust Approach

Explore Zero Trust security strategies for enterprise protection, moving beyond traditional perimeter defenses to role-based, defense-in-depth approaches for safeguarding virtual assets in the modern digital landscape.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

The Journey for Manufacturers to Develop Cyber Resilient IoT Devices

Exploring Panasonic's innovative IoT threat intelligence system, combining physical and software honeypots to detect attacks, collect malware, and enhance cybersecurity for IoT devices.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Detection and Efficiency Testing of Endpoint Security Sensors

Evaluación comparativa de soluciones de seguridad de endpoints, simulando ataques dirigidos para medir la eficacia en detección de amenazas mediante firmas, NGAV y aprendizaje automático.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Hacking the 0day Marketplace

Exploring the 0day vulnerability market's challenges and proposing solutions to improve efficiency, safety, and professionalism for all stakeholders in cybersecurity.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Adventures in Building a CAN Bus Sniffer

Explore the process of building a CAN Bus Sniffer, from prototyping to assembly. Learn hardware development tips, documentation preparation, and small-batch ordering for your first device.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Industrial Protocol Gateways - A Deep-Dive of Moxa MGate 5105-MB-EIP

Explore industrial protocol gateways, focusing on Moxa MGate 5105-MB-EIP. Learn about vulnerabilities, customizing tools, and intercepting configurations in this hands-on deep dive into OT network security.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RAMN - Resistant Automotive Miniature Network

RAMN: An open-source, credit card-sized automotive security testbed simulating CAN/CAN-FD networks. Resistant to harsh conditions, it integrates with CARLA simulator and various tools for research and education.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Trust, but Verify - Maintaining Democracy In Spite of Information Countermeasures

Explore strategies for disrupting elections through cyberwarfare, examining Russia's influence tactics and global countermeasures. Brainstorm innovative election interference methods and discuss protective measures for democracy.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The War for Control of DNS Encryption

Explore DNS encryption's impact on internet privacy and security. Learn about competing standards, deployment strategies, and implications for users and providers.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Exploitation Techniques and Attacks on Hosting Assets and Access for Resale

Exploration of underground markets for compromised network assets, covering exploitation techniques, lateral movement, monetization, and defender strategies for incident response and security monitoring.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Critical Infrastructure Data Breaches - An In-depth Analysis

In-depth analysis of critical infrastructure data breaches, exploring leaked data, automatic analytical processes, and providing insights on high-risk sectors. Offers prevention and mitigation strategies for protecting sensitive information.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk