Hack In The Box Security Conference Courses

Breaking Siemens SIMATIC S7 PLC Protection Mechanism

1 rating

Detailed analysis of vulnerabilities in Siemens SIMATIC PLC protection mechanisms, including hacking methods and security recommendations for various models. Essential for industrial control system security professionals.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

I Own Your Building - Management System

1 rating

Explore vulnerabilities in Building Management Systems, their impact on critical facilities, and the research process behind discovering these security flaws in various BMS components and products.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

API Security in the Age of Microservices

1 rating

Explore API security challenges in microservices architectures and learn strategies for distributed security, including gateways, service mesh, authentication, and network segmentation.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Blockchain - The New Line Of Defense

1 rating

Explore blockchain technology as a cutting-edge defense mechanism in cybersecurity, examining its potential applications and impact on digital security strategies.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

How to Hack Medical Imaging Applications via DICOM

1 rating

Explore critical security vulnerabilities in DICOM servers, protocols, and libraries used in medical imaging systems. Learn to identify and fix bugs in the DICOM ecosystem.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Information Collection of Third-Party SDKs

Innovative static taint analyzer for third-party SDKs, addressing challenges in user data protection and privacy policy compliance. Achieves high accuracy in identifying undisclosed information collection behaviors.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

The Ransomware Protection Full Of Holes

Exposé des failles de la protection contre les ransomwares de Windows, démonstration de méthodes de contournement et d'attaques à distance, avec vidéos à l'appui.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Suborner - Windows Bribery for Invisible Persistence

Discover a stealthy Windows persistence technique that creates invisible machine accounts, evades detection, and impersonates existing users. Learn about the Suborner Attack's implementation and effectiveness.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Unlocking KeeLoq - A Reverse Engineering Story

Reverse engineering KeeLoq systems: extracting firmware, decrypting transmissions, and integrating with home automation. Practical approach to exploiting known vulnerabilities in remote keyless entry systems.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Adventures in Security Research

Explore defensive security, journalism protection, and diverse tech challenges with insights on gun hacking, malware analysis, and mission-driven work from a seasoned security expert.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Breaking Web3 - Exploitation Techniques for Cryptocurrency Hacking

Exploration of common vulnerabilities in Web3 projects, covering blockchain topology, node exploitation, DoS attacks, social engineering, and smart contract vulnerabilities in cryptocurrency systems.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

One-Click to Completely Takeover a MacOS Device

Explore vulnerabilities in MacOS security features and learn how to bypass them for a one-click takeover of both Apple Silicon and Intel Mac devices. Includes live demo and expert insights.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

EDR Evasion Primer for Red Teamers

Insights on EDR inner workings and evasion techniques for red teamers, covering test lab results, reverse engineering findings, and successful attack methodologies to circumvent endpoint protection.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Exploiting a Limited UAF on Ubuntu 22.04 to Achieve LPE

Detailed exploration of exploiting a Linux kernel vulnerability in Ubuntu 22.04 to achieve local privilege escalation, focusing on advanced exploitation techniques and bypass methods.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

E'rybody Gettin' TIPC - Demystifying Remote Linux Kernel Exploitation

Demystifying remote Linux kernel exploitation through a stack overflow vulnerability in a network module, offering insights into the exploit development process and low-level kernel internals.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk