44CON Information Security Conference Courses

Smart Muttering - A Story and Toolset for Smart Meter Platform

Explore smart meter security vulnerabilities and a new open-source framework for embedded device analysis. Learn about critical infrastructure risks and tools for assessing obscure networks and protocols.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

DDoS Mitigation Epic Fail Collection

Explore 10 critical DDoS mitigation failures, their technical details, and recommended solutions. Learn from industry leaders' mistakes to enhance your defense strategies against sophisticated attacks.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Meaningful Measurement - It’s About Time We Got This Right

Explores flaws in current cybercrime metrics, advocating for standardized, business-focused measurements to improve threat intelligence and risk analysis across all enterprise sizes.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Automated Extraction of Configuration and Payloads from Sophisticated Malware

Automated malware analysis system for extracting payloads, configurations, and indicators from sophisticated malware, reducing time and skill requirements for threat intelligence.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Attacks on SAP HANA Platform

Explore vulnerabilities in SAP HANA platform, including on-premise, cloud, and IoT deployments. Learn attack vectors, technical details, and prevention strategies for securing critical business data.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Leverage One-shot UAF to a Minigun

Exploración de técnicas avanzadas de explotación de vulnerabilidades Use-After-Free en Adobe Flash, incluyendo el método UAUAF para obtener acceso completo a la memoria y ejecución de código arbitrario.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Not Only Frogs Can Hop

Explore novel VLAN hopping methods using SNMP, including live demos and the release of Frogger 2 tool for automated and improved network security testing.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Ways to Brick Your Hardware

Explore common hardware hacking pitfalls, recovery methods, and prevention strategies. Learn from experts' experiences to avoid damaging your projects and gain confidence in hardware experimentation.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Trusts You Might Have Missed

Demystifying domain trusts: Enumeration, visualization, and exploitation techniques for red teams. Learn to leverage trust relationships for domain takeover without exploits.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Light at the End of the Tunnel - Hope for Team Defence

Exploring emerging strategies and positive developments in cybersecurity defense, offering hope and practical solutions for improving security posture in an offense-dominated landscape.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Is There an EFI Monster Inside Your Apple

Explore EFI firmware vulnerabilities in Apple devices, their potential for powerful rootkits, and learn techniques to detect and combat these stealthy "monsters" in the low-level system architecture.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Conference Talk

Software Defined Networking - SDN Security

Explore SDN security implications, attack surfaces, and vulnerabilities with live exploit demos. Learn about efforts to enhance SDN controller security and future developments.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Exploiting 64 Bit IE on Windows 8.1 - The Pwn2Own Case Study

Detailed exploration of vulnerabilities and exploit techniques used to compromise 64-bit Internet Explorer on Windows 8.1, including ASLR & CFG bypass and sandbox escape, as demonstrated at Pwn2Own 2015.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Windows 10 - 2 Steps Forward, 1 Step Back

Explore Windows 10's security features and vulnerabilities, examining new protections and potential weaknesses in system services, Edge browser, and user account control.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Responsible Disclosure - Who Cares

Explore real-world experiences of security researchers attempting responsible disclosure, highlighting challenges, vendor responses, and lessons learned in vulnerability reporting.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk