BSidesLV Courses

Latest Threats and Vulnerabilities to Mission-Critical SAP Applications

An overview of emerging threats to mission-critical SAP applications, attack lifecycles, threat actors, and the challenges of reliable vulnerability remediation.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

You Don't Have to Be Crazy to Work Here - An Honest Talk About Mental Health

An honest talk about anxiety, stress, and practical self-care for cybersecurity professionals.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Your Critical System Is - Not? - Vulnerable - CSAF, VEX, SBOM and the Future of Advisories

Explores how CSAF, VEX, and SBOMs modernize vulnerability advisories for automated risk assessment and scalable security decisions in critical systems.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Revenge on the Worms! Towards Deception Against Automated Adversaries

Explore cyber deception against automated adversaries using finite-state machines, multiple plans, and automated planners, with experimental testing and results.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Search Engine Deoptimization with Gootloader

Gootloader's search-engine deoptimization campaign, from compromised WordPress sites and malicious landing-page swaps to JavaScript installation and process hollowing.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

How I Hacked a Bank Using Pen & Paper

A case study of exploiting a Norwegian bank’s paper-based processes, identity checks, account-number logic, and security questions.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Gamification of Tabletop Exercises

Learn how to make tabletop exercises more engaging with game elements, character classes, scenarios, and a journey-based structure.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Lessons Drawn From Cybersecurity in the Rise of Privacy Tech

Lessons from cybersecurity for building privacy technology, covering security and privacy overlap, accountability, transparency, product excellence, and authentic communication.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Have You Distributed Randomness?

Learn how drand uses distributed cryptography, threshold BLS signatures, and entropy sources to generate verifiable, chained randomness.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

State of DNS Rebinding - Attack & Prevention Techniques and the Singularity of Origin

Examine DNS rebinding attacks, protection bypasses, proxy architectures, and automated defenses through walkthroughs and demonstrations.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

SSO Wars - The Token Menace

Examines SAML token and key-resolution flaws that can compromise single sign-on systems, with attack scenarios in .NET, WCF, and SharePoint.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Red Teaming a Manufacturing Network - Without Crashing It

A practical red-team assessment framework for probing manufacturing networks safely, from internet reconnaissance and HMIs to replay and physical attacks, without disrupting operations.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Zero Trust Networks - In Theory and in Practice

A practical look at zero trust network design, covering policy, identity, visibility, automation, and client- and server-side implementations.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Minimum Viable Risk Management Program

Build a minimum viable information-security risk management program for small or immature organizations using asset inventories, binary assessment, and risk treatment.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Six Degrees of Domain Admin - Using Bloodhound to Automate Active Directory Domain Privilege Escalation Analysis

Learn to use BloodHound to automate Active Directory privilege-escalation analysis and identify paths to domain administrator.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk