HackerOne Courses

All Your -Data-base Are Belong To Us

Explore vulnerability research in office applications through fuzzing, code review, and reverse-engineering. Learn to discover and exploit zero-days, with insights on binary exploitation for curious researchers.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Developing CTFS - Writing and Hosting Intentionally Vulnerable Applications

Learn to host Capture The Flag competitions, develop secure vulnerable applications, and set up robust infrastructure for large-scale events. Gain insights into challenge creation and security considerations.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

TruffleHog Chrome Extension - Open CORS in SAAS API's Lead to Leaky Keys

Discover API keys hidden in web pages with the open-source TruffleHog Chrome extension. Learn how to use this tool and explore real-world examples of exposed keys in SaaS APIs with open CORS.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

InfoSec - A Broken Industry That Keeps it Insecure and Risky

Exploring burnout in InfoSec, its impact on mental health, and strategies for better work-life balance. Discusses industry challenges and offers solutions for professionals, especially bug bounty hunters.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Haptyc - A Library for Building Microfuzzers in Turbo Intruders

Explore Haptyc, a Python library enhancing Turbo Intruder with advanced fuzzing capabilities. Learn to create modular, reusable transforms for powerful and efficient HTTP request testing in web security assessments.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Hacking on Bug Bounties for Five Years

Discover the evolution of bug bounty hunting over five years, exploring successful techniques, favorite vulnerabilities, and lessons learned to help you replicate success in ethical hacking.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Breaking Down Offsec Certifications

Explore the value of infosec certifications with industry experts, discussing preparation strategies, career impact, and essential skills for success in the cybersecurity field.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Launching an InfoSec Career

Explore diverse paths to cybersecurity careers, from CTFs to bug bounties. Learn key strategies for success, including self-teaching, building a unique skill set, and leveraging your online presence as a resume.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Introduction to Docker Hacking

Explore Docker container security, including namespaces, cgroups, and vulnerabilities. Learn hacking techniques and best practices for securing containerized environments.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Discover Vulnerabilities with CodeQL

Explore CodeQL's static and taint analysis capabilities to uncover vulnerabilities, including potential RCE flaws. Learn key concepts for effective code analysis and security testing.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

The Bug Hunter's Methodology v4 - Recon Edition

Explore cutting-edge techniques for bug hunters and red teamers to discover and expand attack surfaces, focusing on domain reconnaissance, subdomain enumeration, and IP space analysis.

• YouTube
• 1 hour 13 minutes
• Self-Paced
• Conference Talk

Pentest Story Time - My Favorite Hacks From the Past Year

Engaging tales of successful penetration testing, showcasing diverse attack vectors and vulnerabilities. Highlights include exploiting lack of MFA, IPv6 abuse, and overcoming robust security measures.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

How I Got from 0 to MVH - Without Knowing How to Write a Single Line of Python

Discover one hacker's journey from novice to Most Valuable Hacker, exploring tools, resources, challenges, and strategies for success in bug bounty hunting without coding skills.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

H@cktivitycon 2020 - Graphing Out Internal Networks with CVE-2020-13379 - Unauthed Grafana SSRF

Discover and exploit a critical SSRF vulnerability in Grafana, impacting thousands of companies. Learn methodology, see a live demo, and explore reporting and mass-exploitation experiences.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Burnout

Strategies to recognize, overcome, and prevent burnout in the tech industry. Learn to balance work and personal life, manage stress, and maintain well-being for long-term success.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk