nullcon Courses

Engineering Better Security at Facebook

Explore Facebook's approach to enhancing security through developer-focused tools and practices, addressing vulnerability prevention and detection in large-scale software development.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Drone Hijacking and Other IoT Hacking with GNU Radio and SDR

Explore IoT security vulnerabilities using SDR and GNU Radio. Learn to intercept, sniff, and hijack wireless devices like drones and keyboards through practical demonstrations and attacks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Pretty Easy Privacy - Making Privacy The Default For Everyone

Explore p≡p's innovative approach to automating digital privacy, making end-to-end encryption and anonymity the default for everyone, regardless of technical expertise.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

The Art of Bootloader Unlocking - Exploiting Samsung Sboot

Explore Samsung bootloader security, uncovering hidden protocols and vulnerabilities. Learn about anti-tamper mechanisms, memory corruption, and techniques for unlocking Android devices.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Silicon - Security's New Layer

Explore hardware security challenges, from supply chain vulnerabilities to chip-level attacks. Learn about emerging threats and best practices for securing technology stacks from silicon to software.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Clusterfuzz

Explore Chrome's open-source Clusterfuzz system for real-time security bug detection, distributed fuzzing techniques, and insights into exploitable crash prevention across platforms.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Cold Boot Attack on DDR2 and DDR3 RAM

Explore cold boot attacks on DDR2 and DDR3 RAM, revealing vulnerabilities in data retention after power loss. Learn techniques, results, and mitigation strategies for this cybersecurity threat.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

ICS SCADA Security Analysis of a Beckhoff CX5020 PLC

Análisis de seguridad de un PLC Beckhoff CX5020 utilizado en sistemas SCADA, revelando vulnerabilidades y demostrando formas de obtener control sobre el programa y el sistema operativo.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Mobile Self Defence

Explore mobile network vulnerabilities and learn self-defense strategies using SnoopSnitch, an Android app that detects common attacks like IMSI catchers and SIM exploits.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

ECMA Script 6 from an Attacker's Perspective

Explore ECMA Script 6 from a security perspective, covering new language features, potential attack vectors, and strategies to mitigate risks in modern web browsers.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

The Windows Sandbox Paradox

Explore Windows sandboxing challenges, security vulnerabilities, and OS limitations. Learn about unexpected behaviors, bugs in popular applications, and strategies for auditing sandbox implementations.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Hacking Your Cable TV Network

Explore cable TV network vulnerabilities and attacks, including analog and digital systems, IRD decoders, and management servers. Learn techniques for hijacking set-top boxes and remote shutdown.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Phoneypdf - A Virtual PDF Analysis Framework

Explore tools and techniques for analyzing malicious PDF files, including phoneypdf framework. Learn to leverage Adobe PDF DOM and XFA for deeper insights into PDF exploitation and JavaScript execution.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Multi-Value WiFi - What the Heck Is It

Explore multi-value WiFi, its security implications, and latest developments in cloud Wi-Fi. Learn to leverage wireless technology as a business driver and protect against threats in enterprise environments.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Fuzzing the Easy Way Using Zulu

Explore fuzzing binary protocols with Zulu, a GUI-based tool for easy capture, mutation, and replay. Learn its features and successful bug-finding applications.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk