Hack in Paris Courses

DPAPI and DPAPI-NG Decrypting All Users’ Secrets and PFX Passwords

Discover groundbreaking techniques for decrypting DPAPI-protected data and SID-protected PFX files, revealing potential vulnerabilities in Windows systems and enterprise security.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BMS Is Destroyed by "Smart Button"

Explore vulnerabilities in KNX automation systems for smart buildings. Learn how intruders can exploit weaknesses to conduct attacks, manipulate configurations, and compromise entire networks.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Introduction to IoT Reverse Engineering

Introduction to firmware reverse engineering for IoT devices, focusing on information gathering, emulation environment setup, and analysis techniques. Includes a practical example using a home router.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

RHme3 Hacking Through Failure

Exploring hardware hacking failures during RHme3 CTF challenge: building rigs, writing code, and overcoming obstacles. Insights on learning from setbacks in cybersecurity competitions.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Using Machines to Exploit Machines

Explore machine learning for offensive research: automate crash analysis, determine exploitability, and accelerate bug triage. Discover AI-driven techniques to enhance vulnerability detection and exploitation processes.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

You Try to Detect Mimikatz

Explore mimikatz's capabilities beyond credential collection, understand its power, and learn detection strategies for this persistent post-exploitation tool.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

NFC Payments - The Art of Relay & Replay Attacks

Exploring vulnerabilities in NFC payment systems, focusing on relay and replay attacks. Discusses security challenges and potential bypasses of tokenization in digital transactions.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

No Win32_Process Needed - Expanding the WMI Lateral Movement Arsenal

Explore advanced WMI lateral movement techniques beyond Win32_Process, expanding the arsenal for threat actors and enhancing defensive strategies against sophisticated attacks.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

How to Bring HID Attacks to the Next Level

Exploring advanced HID attack techniques using WHID Injector and P4wnP1, including design insights, feature comparisons, and defensive strategies for Blue Teams to detect and mitigate these sophisticated threats.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

The Past, Present & Future of Enterprise Security

Evolution of enterprise security: from traditional methods to automated attacks. Explores sophisticated tactics, tools, and techniques reshaping Active Directory vulnerabilities and domain privilege escalation.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

The Bicho - An Advanced Car Backdoor Maker

Explore advanced car backdoor techniques using "The Bicho," surpassing Bluetooth limitations for enhanced attack range and effectiveness in connected vehicle security.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Hunting PBX for Vulnerabilities

Explore PBX vulnerabilities, their impact, and mitigation strategies. Learn about potential security threats and how to protect against them in various PBX systems.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

To Serve Man - AI, Machine Learning & Deep Learning in Security

Explore AI, machine learning, and deep learning in cybersecurity through a lively debate. Experts discuss vendor claims, organizational readiness, and future implications, inviting audience participation.

• YouTube
• 1 hour 26 minutes
• On-Demand
• Conference Talk

The Insecure Software Development Lifecycle - How to Find, Fix, and Manage Deficiencies Within an Existing Methodology

Practical techniques for integrating security into existing software development methodologies, addressing deficiencies, and ensuring compliance throughout the SDLC.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Invoke-DOSfuscation - Techniques for S-level CMD Obfuscation

Explore advanced CMD obfuscation techniques used by threat actors, including string manipulation and encoding methods. Learn about new obfuscation approaches and their detection implications for cybersecurity professionals.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk