Hack In The Box Security Conference Courses

I Own Your Building - Management System

1 rating

Explore vulnerabilities in Building Management Systems, their impact on critical facilities, and the research process behind discovering these security flaws in various BMS components and products.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Breaking Siemens SIMATIC S7 PLC Protection Mechanism

1 rating

Detailed analysis of vulnerabilities in Siemens SIMATIC PLC protection mechanisms, including hacking methods and security recommendations for various models. Essential for industrial control system security professionals.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

API Security in the Age of Microservices

1 rating

Explore API security challenges in microservices architectures and learn strategies for distributed security, including gateways, service mesh, authentication, and network segmentation.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

How to Hack Medical Imaging Applications via DICOM

1 rating

Explore critical security vulnerabilities in DICOM servers, protocols, and libraries used in medical imaging systems. Learn to identify and fix bugs in the DICOM ecosystem.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Blockchain - The New Line Of Defense

1 rating

Explore blockchain technology as a cutting-edge defense mechanism in cybersecurity, examining its potential applications and impact on digital security strategies.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Investigating Propagated Vulnerabilities from Ethereum to Layer-2 Blockchains

Explore how vulnerabilities propagate from Ethereum to Layer-2 blockchains, featuring BlockScope tool analysis and discovery of 15 zero-day vulnerabilities across BSC, Optimism, Base, and Mantle networks.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Exposing Critical Threats in Cellular Modem Security - Telit Vulnerabilities Analysis

Uncover critical security vulnerabilities in Telit cellular modems, including remote code execution flaws, SMS-based attacks, and MIDlet compromise methods that affect millions of connected devices.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Leveraging HTTP Request Smuggling for Authentication Bypass and Remote Code Execution

Delve into HTTP Request Smuggling vulnerabilities, exploring real-world cases of authentication bypass and remote code execution in enterprise applications, with practical detection and mitigation strategies.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Secret Scanning in Open Source at Scale - An In-Depth Analysis

Discover critical insights into large-scale secret scanning across NPM packages, WordPress plugins, and Ruby Gems, exploring supply chain vulnerabilities and implementing preventive measures in CI/CD pipelines.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Hunting Trojans with AST Transformers and Machine Learning

Discover advanced techniques for detecting malicious Python projects using AST Transformers and machine learning, focusing on obfuscation methods and countermeasures in cybersecurity.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Revealing Microphone Nonlinear Behavior and Building an Ultrasonic Jammer

Discover how to exploit microphone nonlinearity and build ultrasonic jammers for enhanced privacy protection, exploring advanced counter-surveillance techniques and practical implementations.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Bug Hunting in VMware Device Virtualization - A Dragon Slaying Guide

Delve into advanced VMware device virtualization security, exploring undiscovered attack surfaces in VMKernel, USB, and SCSI systems while learning vulnerability detection techniques from expert researchers.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

The Modern CISO - Hacking Management While Defending the Fort

Explore the evolving role of modern CISOs, combining technical expertise with strategic management to navigate cybersecurity challenges, budget allocation, and breach management effectively.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Android MRI Interpreter: Taking Pictures of App Code for Vulnerability Analysis

Explore Android app vulnerability detection through a novel OS with MRI-like functionality, enabling non-invasive code analysis and data flow tracing for enhanced mobile security.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

GPTHound: Your Active Directory Security Assistant - Enhancing AD Assessment

Explore GPTHound, an AI-powered tool enhancing Active Directory security assessments. Learn how it simplifies query generation, asset classification, sensitive information detection, and attack path analysis across multiple languages.

• YouTube
• 46 minutes
• Self-Paced
• Free Video