44CON Information Security Conference Courses

Breaking Historical Ciphers with Modern Algorithms

Explore how modern algorithms break historically significant ciphers, from Enigma and ADFGVX to double column transpositions, while some Cold War messages remain unsolved.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Reverse Engineering Windows Malware 101 Workshop

Learn to set analysis goals and reverse engineer Windows malware through hands-on triage, static, and dynamic analysis with x86 assembly and RE tools.

• YouTube
• 1 hour 26 minutes
• Self-Paced
• Conference Talk

The Black Art of Wireless Post-Exploitation - Bypassing Port-Based Access Controls Using Indirect Wireless Pivots

Learn how rogue access points can bypass port-based network access controls by exploiting weaknesses in enterprise WPA2-EAP wireless defenses.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

How to Hack Radios - RF Physical Layers

Hands-on software-defined radio techniques for reverse engineering proprietary wireless protocols and recovering or injecting packets.

• YouTube
• 2 hours 10 minutes
• Self-Paced
• Conference Talk

Realtime Communications, Realtime Risks

Explore WebSocket security risks, vulnerabilities in enterprise applications, and a new Burp Suite extension for improved pentesting of real-time communications.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

A Security Research Journey - How the Mobile Industry Met Hackers in the Middle

Explore the mobile industry's collaboration with hackers to enhance security, from informal relationships to a cross-industry vulnerability disclosure scheme, featuring key hacks and future challenges.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Ghidriff

Explore ghidriff, an open-source Python package for efficient binary diffing using Ghidra. Learn about its command-line interface, function matching heuristics, and markdown output for simplified patch analysis and vulnerability research.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Uncursing the ncurses

Explore memory corruption vulnerabilities in ncurses, their impact on system security, and the journey of discovery from environment variable to potential privilege escalation.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Missed Opportunities

Explore overlooked security vulnerabilities and potential attack vectors in software systems with insights from a leading cybersecurity expert.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Red Team Tales - 7 Years of Physical Penetration Testing

Insider tales from 7 years of physical penetration testing, revealing techniques for breaching high-security facilities and debunking myths about physical security across various industries.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

The New SaaS Cyber Kill Chain

Exploring the evolving cyber kill chain in SaaS-native organizations, discussing new attack vectors, lateral movement techniques, and persistent threats in cloud-based environments.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Sleeping with One AI Open

Explore adversarial attacks on AI/ML systems, their real-world implications, and mitigation strategies. Learn about potential risks and security considerations in AI-driven technologies across various sectors.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Don't You Know Who I Think I Am?

Explores the evolution of digital identities, from passwords to biometrics, highlighting challenges and the need for government leadership in authentication technologies.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Getting In - Initial Access - 2023 and Beyond

Explore cutting-edge techniques for gaining initial access in cybersecurity, focusing on creative social engineering methods that bypass modern corporate defenses and email filters.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Detection and Blocking with BPF via YAML

Explore BPF-based monitoring and blocking using YAML configurations with OSS Tetragon. Learn to enhance system security without writing BPF code, including event logging and multi-channel notifications.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk