Hack In The Box Security Conference Courses

I Own Your Building - Management System

1 rating

Explore vulnerabilities in Building Management Systems, their impact on critical facilities, and the research process behind discovering these security flaws in various BMS components and products.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

API Security in the Age of Microservices

1 rating

Explore API security challenges in microservices architectures and learn strategies for distributed security, including gateways, service mesh, authentication, and network segmentation.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Breaking Siemens SIMATIC S7 PLC Protection Mechanism

1 rating

Detailed analysis of vulnerabilities in Siemens SIMATIC PLC protection mechanisms, including hacking methods and security recommendations for various models. Essential for industrial control system security professionals.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

How to Hack Medical Imaging Applications via DICOM

1 rating

Explore critical security vulnerabilities in DICOM servers, protocols, and libraries used in medical imaging systems. Learn to identify and fix bugs in the DICOM ecosystem.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Blockchain - The New Line Of Defense

1 rating

Explore blockchain technology as a cutting-edge defense mechanism in cybersecurity, examining its potential applications and impact on digital security strategies.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Unpacking Real Malware With Their Runtime Protection

Dive into real-world malware analysis from Southeast Asia, learning to bypass runtime protections like obfuscation, packing, and anti-debugging through hands-on demonstrations.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Build Your Own SOC - Security Operations Center from Scratch

Build your own SOC from scratch using open-source tools - covering log forwarding, parsing, normalization, and high-signal detections like honey-tokens to catch real attackers.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

AI Agents As Your Organization's Personal Security Newsroom

Discover how LLM agent workflows create tailored cyber threat intelligence feeds, automating research from diverse sources to deliver organization-specific security insights.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Security Onion - Scaling SIEM for Enterprise Environments

Discover how to scale Security Onion SIEM for enterprise environments with multi-tenancy, authentication integration, and 100K EPS log ingestion capabilities.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Agentic ProbLLMs - Exploiting AI Computer-Use and Coding Agents

Explore real-world prompt injection attacks targeting AI coding agents like OpenAI's Operator and Claude Code, revealing critical vulnerabilities and "ZombAI" exploitation techniques.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

The Power of Powerlogs - Apple Device Forensic Analysis

Explore Apple's massive Powerlogs database with 600+ tables for forensic analysis, uncovering user activity, travel patterns, apps, and system states from iPhone to Vision Pro devices.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Covert Entry Stories and The Lessons That They Teach Us

Uncover real-world red team physical breach stories and learn how corporate security fails, plus defensive strategies to prevent network compromise through physical entry points.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Exploiting UEFI SMM Vulnerabilities for Persistent Implants

Dive into UEFI SMM vulnerabilities and exploit development techniques for creating persistent firmware implants that bypass OS-level protections and maintain long-term device access.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Updates on Public Key Infrastructure - Modern PKI Changes for Security Engineers

Explore evolving PKI landscape with shorter certificate lifespans, enhanced CT logs, and automation tools to strengthen network security and reduce compromise recovery times.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Cloud Edge Phishing - Breaking The Future Of Auth

Explore advanced phishing techniques using serverless platforms to bypass modern authentication defenses including MFA, OAuth tokens, and FIDO2/passkeys.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Free Video