CarolinaCon Courses

Open Source Intelligence Gathering for Security Testing - Recon 101

Master essential OSINT techniques and reconnaissance tools to efficiently gather critical intelligence about organizational infrastructure and potential security vulnerabilities without active network engagement.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Automating Password Cracking Rigs with HashCat - Building Resilient Systems

Master automated password cracking infrastructure setup with Ansible and libvirt/QEMU, focusing on system resilience, snapshots, and rollbacks for optimized hashcat operations.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Deconstructing Firewalls - Automated Rules in Distributed SDN Networks

Explore automated firewall management through Software Defined Networking and SMT solvers, enabling scalable security solutions that integrate with IDS systems without compromising network performance.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Fuzzing - Finding Your Own Bugs and Zero-Days

Master the art of fuzzer creation and vulnerability discovery, exploring buffer overflow exploitation techniques with hands-on demonstrations and practical exploit development strategies.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Dynamic Database Credentials: A Secure and Efficient Approach

Discover how dynamic, short-lived database credentials enhance security and efficiency while minimizing vulnerabilities in database management systems and authentication protocols.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Shining a Light Into the Security Blackhole of IoT and OT Networks

Explore effective strategies for securing and managing IoT and OT networks, addressing challenges in asset inventory, vulnerability assessment, and security control implementation.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Social Engineering Attack: How to Rob a Bank Over the Phone

Dive into a real-world social engineering case study where an expert demonstrates how he gained unauthorized access to a bank's systems through sophisticated phone manipulation techniques.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Protecting Yourself Online: Social Engineering Defense and Privacy Strategies

Discover essential strategies for protecting your digital footprint from social engineering attacks, learning how pentesters gather public information and implementing effective countermeasures.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Pen-Testing the Communication Security Between Implanted Medical Devices and Home Monitoring Devices

Explore security vulnerabilities in medical device communications, focusing on pacemaker systems and practical solutions to protect patient safety and data privacy.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Explosive Overflow: Lessons in Software Design from Rocket Science

Explore software design lessons from the Ariane 5 rocket failure, examining testing, validation, and security principles to prevent catastrophic system failures in critical applications.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Creating a Secure Web Server from Two Vulnerable Web Servers

Discover how to build a secure web server by comparing responses from multiple servers across different operating systems to detect and prevent zero-day exploits and vulnerabilities.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Strengthening Supply Chain Security - A DevSecOps Perspective

Explore modern supply chain security challenges and solutions through DevSecOps principles, focusing on emerging threats, operational complexities, and practical defensive strategies for today's digital landscape.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Repercussions from the Absence of Threat Actor Taxonomy - Understanding Naming Fragmentation in Cybersecurity

Explore the challenges of fragmented threat actor naming conventions and discover how MITRE ATT&CK's framework can help standardize cybersecurity threat research and tracking.

• YouTube
• 21 minutes
• On-Demand
• Free Video