nullcon Courses

0Day Up Your Sleeve - Attacking macOS Environments

Comprehensive guide to macOS security vulnerabilities, including live demonstration of 0-day exploit, post-exploitation techniques, and hardening recommendations for Mac infrastructures.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Does Your SOC Suck?

Panel discussion on optimizing Security Operations Centers (SOCs), covering best practices, challenges, and innovative approaches to enhance cybersecurity monitoring and response capabilities.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Hacking 5G Is No Rocket Science

Explore API attacks in 4G/5G IoT networks, revealing vulnerabilities and discrepancies between security standards and real-world implementations. Learn about potential threats and defense strategies for mobile IoT infrastructure.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Securing India - The CERT-In Way

Panel discussion on CERT-IN's notification for reporting security breaches, emphasizing timely incident reporting, organizational awareness, and citizen precautions to enhance India's cybersecurity posture.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

A New Secret Stash For Fileless Malware

Explores advanced fileless malware techniques using Windows event logs for code hiding and infection. Reveals new methods to conceal shellcode and manipulate logging functions.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

PAM Maturity From Zero Trust To Least Privilege

Panel discussion on PAM maturity, exploring the journey from zero trust to least privilege. Industry experts share insights on implementing effective privileged access management strategies in modern cybersecurity landscapes.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Elevating the TrustZone to Achieve a Powerful Android Kernel Exploit

Explore a novel Android kernel exploitation technique using TrustZone to bypass security mitigations, achieve 100% reliability, and create a versatile exploit applicable across devices and versions.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Software Defined Snort With Barnyard & Pulled Pork For NIDPS

Explore software-defined networking for enhanced network security, focusing on DDoS defense and traffic programming using Snort and its dependencies to mitigate WAF bypass attempts.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Unlocking Security Collaboration With Cyber Threat Intelligence

Panel discussion exploring how CXOs can leverage cyber threat intelligence for enhanced security collaboration and proactive defense strategies in today's evolving threat landscape.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Do PDF Tools Conform to the Specification

Explore a novel type checker enforcing PDF specifications, uncovering deviations in tools and contributing to improvements in the PDF 2.0 standard. Learn about SPARTA and PDFFixer for enhanced PDF file management.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Cloud Services for Financial Inclusion - Possibilities and Challenges

Panel discussion exploring cloud services' potential and challenges for financial inclusion, featuring insights from cybersecurity experts and industry leaders.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Raining CVEs on WordPress Plugins with Semgrep

Leveraging Semgrep to identify vulnerabilities in WordPress plugins, reducing false positives, and automating XSS validation. Includes demos on custom rule creation and the XSSBomb tool.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Consumer Bug Bounty Panel - Tech Bug Bounty Panel - Hear from the Program Managers

Panel discussion with program managers sharing insights on running bug bounty programs, challenges faced, and best practices for organizations.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Handling a Bug Bounty Program from a Blue Team Perspective

Strategies for blue teams to manage bug bounty programs effectively, balancing security needs with researcher experience. Focuses on mitigating operational risks and optimizing defense rules for real threats.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Service Workers vs Corporate Firewalls

Explore how service workers can be exploited to bypass corporate firewalls, potentially compromising network security. Learn about this innovative attack vector and its implications.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk