BSidesLV Courses

CloudSec Rules Everything Around Me - C.R.E.A.M.

Explore cloud security essentials, from shared responsibility to logging, compliance, and incident response. Learn best practices for AWS, Azure, and Office 365 environments.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Deepfakes, Deep Trouble - Addressing the Potential Impact of Deepfakes on Market Manipulation

Explore the potential impact of deepfakes on market manipulation, examining traditional and new techniques, legal implications, and real-world examples. Learn about solutions to combat this emerging threat.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

State of DNS Rebinding - Attack & Prevention Techniques and the Singularity of Origin

Explore DNS rebinding attacks, prevention techniques, and the concept of origin singularity. Learn about query analysis, protection bypasses, and practical defense strategies against this web security threat.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

SSO Wars - The Token Menace

Explore SSO vulnerabilities, focusing on JWT and SAML tokens. Learn attack vectors, signature verification issues, and real-world implications for frameworks like WCF and SharePoint.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Examining DES-based Cipher Suite Support within the TLS Ecosystem

Explore DES-based cipher suite support in TLS, analyzing prevalence, geographical distribution, and implications for security. Learn why DES persists and how to remove it.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

From Email Address to Phone Number - A New OSINT Approach

Explore innovative OSINT techniques to uncover phone numbers from email addresses, enhancing privacy and security investigations with cutting-edge methodologies and tools.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

From EK to DEK - An Analysis of Modern Document Exploit Kits

Explore modern document exploit kits, their infection chains, and techniques. Gain insights into ThreadKit, VenomKit, and various exploitation methods used in malicious documents.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Serverless Infections - Malware Just Found a New Home

Explore serverless architecture vulnerabilities and learn how malware can exploit AWS Lambda functions, with insights on prevention and security best practices.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Turning - Page Tables - Bypassing Advanced Kernel Mitigations Using Page Tables Manipulations

Explore advanced kernel exploit techniques using page table manipulations to bypass Windows 10 mitigations. Learn virtualization-based security and memory management concepts.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Watch Out For That Bus! - Personal Disaster Recovery Planning

Practical strategies for personal disaster recovery planning, covering digital security, backups, financial preparedness, and ensuring loved ones can manage your affairs in emergencies.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

The Current State of Adversarial Machine Learning

Explore adversarial machine learning's current landscape, including attack types, vulnerabilities, and defense strategies. Gain insights into visual understanding and notable research in this critical field.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Hackademia - The 2018 Literature Review

Explore cutting-edge cybersecurity research, from USB vulnerabilities to compiler techniques, with insights on emerging trends like citizen developers and domestic violence apps.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Bypassing Antivirus Engines Using Open Sourced Malleable C2 Software, MSFVenom, Powershell and a Bit of Guile

Learn techniques to bypass antivirus using open source tools like Malleable C2, MSFVenom, and PowerShell. Explore examples and scripts for more effective penetration testing and security assessments.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Disabling Encryption to Access Confidential Data

Explore techniques for disabling encryption to access confidential data, including man-in-the-middle attacks, AWS vulnerabilities, and TLS exploits. Learn practical methods and necessary tools for intercepting encrypted communications.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

What is Agile and How Can I Use it Well?

Learn Agile methodology principles, implementation strategies, and best practices for effective team management and project delivery in this concise, practical guide.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk