Hack In The Box Security Conference Courses

Binder - The Bridge To Root - Hongli Han and Mingjian Zhou

Exploración detallada de la vulnerabilidad "Waterdrop" en el controlador Binder de Android, que permite escalar privilegios y obtener acceso root en dispositivos populares, incluyendo los Pixel más recientes.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Sneaking Past Device Guard

Exploración de técnicas avanzadas para eludir Device Guard en Windows 10, incluyendo métodos que requieren privilegios de administrador y otros que utilizan aplicaciones nativas del sistema operativo.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

A Successful Mess Between Hardening and Mitigation

In-depth analysis of Content Security Policy for XSS prevention, exploring its effectiveness, debunking myths, and sharing real-world data on successful XSS mitigation in sensitive applications.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Researching New Attack Interfaces on iOS and OSX

Exploración de nuevas interfaces de ataque en iOS y OSX, revelando vulnerabilidades del kernel y controladores mediante ingeniería inversa, análisis estático/dinámico y fuzzing mejorado.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Overcoming Fear - Reversing With Radare2

Comprehensive guide to reversing with Radare2, covering installation, basic commands, visual modes, configuration, and practical applications. Suitable for beginners and professionals in computer security.

• YouTube
• 2 hours 5 minutes
• Self-Paced
• Conference Talk

Duplicating Black Box Machine Learning Models

Exploración de técnicas avanzadas para duplicar modelos de aprendizaje automático de caja negra, destacando vulnerabilidades en servicios en la nube y proponiendo un nuevo método de ataque más eficiente.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Finding Vulnerabilities in iOS - MacOS Networking Code

Explore iOS/macOS networking vulnerabilities, focusing on mbuf processing in XNU kernel. Learn about network packet structures, vulnerability discovery techniques, and PoC exploit development.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

TOCTOU Attacks Against Secure Boot and BootGuard

Explore TOCTOU attacks on Intel's BootGuard, learn about vulnerabilities in secure boot processes, and discover open-source tools for testing system security.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Hourglass Fuzz - A Quick Bug Hunting Method

Introducción a Hourglass Fuzz, un método rápido de búsqueda de errores para Android que supera las limitaciones de los sistemas de fuzzing típicos, con ejemplos de vulnerabilidades descubiertas en controladores gráficos y Bluetooth.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Hey Attacker! I Can See You!

Exploring cloud-scale deception technology to track and analyze attackers, enhancing Azure security through psychological and technical approaches for better threat intelligence and user protection.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

WiCy - Monitoring 802.11AC Networks At Scale

Explore challenges in 802.11ac network monitoring and learn to create a custom monitoring platform using repurposed access point hardware. Gain practical knowledge and scripts for implementation.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Rise of the WarPi

Explore WarRoaming techniques, custom gear, and strategies for efficient WiFi discovery. Learn from a top-ranked WiGLE.net contributor's journey and insights into wireless surveying and intelligence gathering.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Hacking LTE Public Warning Systems

Exploring vulnerabilities in LTE Public Warning Systems, demonstrating how fake emergency alerts can be created using low-cost hardware, potentially causing panic or system paralysis.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Infrared - Old Threat Meets New Devices

Exploring infrared technology's resurgence in smart devices, examining potential security vulnerabilities, and demonstrating innovative attack vectors using IR transmitters and receivers.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Taking Over Telecom Networks

Explore telecom network vulnerabilities, attack vectors, and security best practices in this comprehensive overview of mobile infrastructure risks.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk