Ekoparty Security Conference Courses

El Detrás de Escena de un Bug Bounty: Del Reporte al Pago

Descubre el proceso interno del triage en programas de bug bounty, desde la evaluación de reportes hasta el pago, con consejos prácticos para optimizar tus envíos y mejorar tu efectividad como cazador.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Advanced Features in Web Fuzzing with FFUF

Discover advanced web fuzzing techniques and underutilized features in ffuf to enhance your offensive security capabilities and bug bounty hunting effectiveness.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Hacia Dos ATO: Eslabón por Eslabón - Casos de Account Takeover en Seguridad Web

Descubre el proceso detallado de dos account takeovers de alta criticidad, explorando la combinación de vulnerabilidades SSO, XSS y configuraciones incorrectas para lograr ataques exitosos.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

From Survey.js to Remote Code Execution in Meta

Descubre el proceso de identificación y explotación de una vulnerabilidad de carga de archivos sin restricciones en Meta, desde la búsqueda inicial hasta lograr RCE y el proceso de reporte exitoso.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Race Condition - De P2 a P1 en Bug Bounty: Historia de una Vulnerabilidad Crítica

Descubre cómo una vulnerabilidad de condición de carrera evolucionó de P2 a P1 en Bugcrowd, incluyendo detalles técnicos y lecciones aprendidas sobre la identificación de fallos críticos en programas de bug bounty.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Variant Analysis: Identifying and Addressing Related Vulnerabilities

Master variant analysis techniques for identifying related vulnerabilities, using pattern recognition and code similarity analysis to enhance security posture and maximize bug bounty opportunities.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Gotta Cache Em All - Bending the Rules of Web Cache Exploitation

Discover powerful web cache exploitation techniques, including Static Path Deception and Cache Key Confusion, to identify vulnerabilities in major platforms and learn practical defense strategies for securing web applications.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Alto Envenenamiento del Cache en Windows - Explotación y Análisis

Descubre cómo explotar la vulnerabilidad de envenenamiento del cache de activación en Windows para obtener privilegios de administrador y ejecución de código con nivel de integridad alto.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Flipping Bits - Weaponizing Domain Bitflips for Credential Harvesting

Explore bit-flipping attacks on domain names, discovering how manipulating single binary digits can lead to credential harvesting, token capture, and security vulnerabilities in cloud services.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Crafting and Detecting Persistent Backdoors in Draytek Routers

Discover how to analyze Draytek router firmware security, extract and assess modules, detect backdoors, and implement protective measures for over 500k exposed devices worldwide.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Cyber Mirage: How AI-Powered Social Engineering is Shaping Future Cyber Threats

Explore how AI transforms social engineering through real-time demonstrations of deepfake and voice cloning technologies, revealing emerging cyber threats and essential defense strategies for modern security.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Advanced Fuzzing with LibAFL

Dive into advanced fuzzing techniques using LibAFL, exploring intelligent input mutations and vulnerability detection methods for complex binary-only targets with AFLplusplus project maintainer.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Deoxidizing the Rust Malware Ecosystem - Project 0xA11C

Dive into advanced techniques for analyzing Rust-based malware through Project 0xA11C, exploring practical methodologies and tools to decode complex threats like RustDown, RustBucket, and Spica.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Facebook Messenger Bug Hunting - A Bug's End-to-End Lifecycle

Dive into Facebook Messenger's security landscape through real case studies exploring bug discovery, impact assessment, and remediation processes from both hunter and patcher perspectives.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Breaking Corporate Maven Repositories - Exploiting Vulnerabilities in Repository Managers

Discover critical vulnerabilities in Maven repository managers and learn exploitation techniques for securing artifact distribution systems and preventing supply chain attacks in Java ecosystems.

• YouTube
• 31 minutes
• Self-Paced
• Free Video