44CON Information Security Conference Courses

Going AUTH the Rails on a Crazy Train

Explore common authentication and authorization pitfalls in Rails applications, and learn about a new dynamic analysis tool for security researchers and developers.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Barbarians at the Gateway - An Examination of the Attacker’s Tool Box

Explore DDoS attack tools, methods, and motivations. Gain insights into attacker patterns and progression for better protection against cyber threats.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Toppling Domino - Testing Security in a Lotus Notes Environment

Explore Lotus Notes/Domino security vulnerabilities and learn effective penetration testing techniques for web servers, native servers, and client-side exploits.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Big Game Hunting

Discover simple techniques for bug hunting on AIX and IBM products, building on "Breaking The Links" methodology and exploring new vulnerabilities.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

DGA Detection & Optimization

Explore advanced machine learning for network-level DGA detection and the latest crimeware evasion techniques. Learn about botnet elements, forensics, and new detection technologies.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

PinPadPwn

Explore vulnerabilities in payment terminals, including memory corruption and code execution risks. Learn about attack surfaces, research approaches, and potential payloads in chip-and-pin systems.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Malware Analysis as a Hobby

Learn to create an efficient, automated environment for analyzing suspected malicious sites and software, even with limited time and budget.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

I'm the Guy Your CSO Warned You About

Explore modern social engineering tactics and tools used by cybercriminals, with live demonstrations and practical defense strategies for individuals and organizations.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Why Integrity Is Left Alone and Not Given the TLC It Deserves

Exploring the neglected aspect of data integrity in information security, its importance for business decisions, and practical solutions for ensuring data accuracy.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

House of Cards - How Not to Collapse When Bad Things Happen

Discover how to build resilient enterprise security by actively testing defenses, validating controls, and learning from simulated scenarios to prepare for real-world threats and challenges.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

How to Explain Post-Quantum Cryptography to a Middle School Student

Demystifying post-quantum cryptography: Learn about five families of crypto systems resistant to quantum computing, explained through simple analogies and everyday objects like Rubik's Cubes and braids.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Pwning the Nerf Gun

Reversing and hijacking a remote-controlled Nerf tank gun through hardware, firmware, and RF analysis. Includes live demonstration of taking control and potentially shooting the conference organizer.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Weak Analogies Make Poor Realities

Exploring the shift from viewing cybersecurity as risk to security debt, challenging traditional paradigms and proposing a new approach to articulate and measure software security benefits.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Security Module for PHP7 - Killing Bugclasses and Virtual-Patching the Rest

Explore Snuffleupagus, a new PHP security module for killing bug classes and virtual-patching vulnerabilities without modifying application code. Learn its features and implementation.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Bypassing Port-Security In 2018 - Defeating MacSEC and 802.1x-2010

Explore novel techniques for bypassing 802.1x-2010 and MacSEC, discussing weaknesses in EAP and demonstrating improved methods for network penetration using the open-source tool Silent Bridge.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk