Hack in Paris Courses

NetflOSINT- Taking an Often-Overlooked Data Source and Operationalizing It - Joe Gray - Hack in Paris

Learn to operationalize NetFlow for network forensics by extracting flow data from PCAPs and applying statistical analysis to investigate traffic.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

All Roads Lead to OpenVPN Pwning Industrial Remote Access Clients - Sharon Brizinov - Hack in Paris - 2021

Examine how industrial remote-access solutions using OpenVPN can expose VPN clients to one-click remote code execution through malicious websites.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Social Forensication: A Multidisciplinary Approach to Successful Social Engineering - J.Gray - Hack in Paris - 2019

A two-pronged social engineering attack combining memory-image collection with a rogue Wi-Fi access point, alongside detection and mitigation techniques.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

The Forgotten Interface- Windows Named Pipes - Gil Cohen - Hack in Paris - 2017

Explore Windows named pipes as an application-level attack surface through connection, enumeration, sniffing, fuzzing, exploitation, and defensive mitigation.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

SCADA Security - Why Is It So Hard - Amol Sarwate - Hack in Paris

Explore why SCADA security is difficult through system components, Modbus and DNP3 protocol attacks, real-world controls, and mitigation guidance.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Countdown to YQ2 - Quantum Readiness for Enterprise

An accessible overview of quantum-era cybersecurity risks, quantum key distribution, post-quantum cryptography, and preparation strategies.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Down the Rabbit Hole - A Journey Towards a Weakness in Chrome and a New Hacking Technique

Explore how CRLF injection led to Frontjacking, a browser and reverse-proxy attack technique that bypasses XSS, phishing, and common web defenses.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Why React Applications Get Hacked in the Real-World

Learn how insecure React APIs, components, props, and user-input handling can expose applications to real-world attacks such as XSS.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Weaponizing Rsync 0Day Vulnerability

A technical analysis of weaponizing a long-standing rsync flaw for arbitrary file writes, wormable remote code execution, and lateral movement.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Exploiting Volatile Memory Analysis Challenges for Fun and Profit

Automate volatile-memory investigations with interactive artifact correlation, system manifests, and snapshot analysis to expose malware hidden in RAM.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Strong Story to Tell - Top 10 Mistakes by Administrators about Remote Work

A hacker’s view of the top 10 remote-work security mistakes, with demonstrations of attacks and practical mitigations.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

If Descartes Applied Counter Deception in Cyberspace

Explore how Descartes’s stages of doubt reveal psychological manipulation in cyberspace and inform techniques for recognizing and mitigating deception.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Pinata - PIN Automatic Try Attack

Analyze how an inadequate EMV implementation could enable an automated brute-force attack across all 10,000 four-digit PIN combinations.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

I Know What Your Microsoft Mainframe Did Last Summer

Hands-on Active Directory forensics explores hunting attack clues after logs are wiped, tracing lateral movement, reconnaissance, persistence, and privilege escalation with open-source tools.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

How to Measure the Security of Your Network Protection Devices

Measure the efficacy, risk, and trust of network protection devices to evaluate how well they defend security environments.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk