Hack In The Box Security Conference Courses

ModJack - Hijacking the MacOS Kernel

Explore a userspace logic bug chain for kernel privilege escalation on macOS, bypassing security measures and loading unsigned kernel extensions. Learn about module hijacking and mitigation techniques.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Reversing Cryptographic Primitives Using Quantum Computing

Explore quantum computing's impact on cryptography, including reversing cryptographic primitives using quantum circuits and real hardware implementations of P-Box, S-Box, CRC-8, and XOR functions.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Compiler Bugs and Bug Compilers

Explore compiler vulnerabilities and malicious modifications in GCC, from accidental bugs to intentional exploits. Learn about compiler stages, potential attack vectors, and strategies for detecting malicious alterations.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

Improving Unicode Attacks With Deep Learning

Exploración de ataques Unicode mejorados con aprendizaje profundo, creando un diccionario de caracteres confundibles para desarrollar herramientas ofensivas sofisticadas y nuevos procedimientos de prueba de aplicaciones.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

HDMI - Pwning HDMI For Fun And Profit

Explore HDMI vulnerabilities through protocol analysis, fuzzing techniques, and real-world exploitation, showcasing potential security risks in AV devices and demonstrating practical attack vectors.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Automated Discovery of Logical Privilege Escalation Bugs in Windows 10

Automated discovery of logical privilege escalation vulnerabilities in Windows 10 services, using simulated user interactions and interface calls. Includes methodology, ALPC analysis, and system implementation.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Pwning Centrally-Controlled Smart Homes

Exploring vulnerabilities in centrally-controlled smart homes, demonstrating remote attacks on IoT devices like door locks, gates, and gas valves, and discussing analytical methods for smart home hacking.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

SeasCoASA - Exploiting A Small Leak In A Great Ship

Exploiting vulnerabilities in Cisco ASA firewalls: New techniques to bypass protection mechanisms, heap exploitation strategies, and disclosure of a 0-day vulnerability affecting major ASA versions.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Attacking GSM - Alarms, Smart Homes, Smart Watches and More

Explore vulnerabilities in GSM devices like alarms and smartwatches. Learn number spoofing, brute-force attacks, and mobile operator exploits. Gain hands-on experience and develop security requirements for GSM systems.

• YouTube
• 1 hour 17 minutes
• On-Demand
• Conference Talk

For The Win - The Art of the Windows Kernel Fuzzing

Explore advanced Windows kernel fuzzing techniques, including a new method and custom tool for discovering vulnerabilities in kernel objects and their relationships.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Deobfuscate UEFI - BIOS Malware and Virtualized Packers

Practical approach to reverse engineering obfuscated BIOS/UEFI malware and virtualized packers, using tools and techniques for code simplification and threat analysis.

• YouTube
• 1 hour 9 minutes
• On-Demand
• Conference Talk

The Birdman - Hacking Cospas-Sarsat Satellites

Explore vulnerabilities in satellite-based rescue systems, focusing on the International Cospas-Sarsat Programme. Learn about eavesdropping, spoofing, and active attack techniques on satellite communications.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

How to Dump, Parse, and Analyze i.MX Flash Memory Chips

Explore techniques for dumping, parsing, and analyzing i.MX flash memory chips, focusing on NXP i.MX architecture in embedded systems. Learn about custom flash memory management and tools for recovering filesystems.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

fn_fuzzy - Fast Multiple Binary Diffing Triage With IDA

Efficient binary diffing tool for IDA Pro, using fuzzy hashes to quickly compare and import function data from multiple IDBs, enhancing malware analysis productivity.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Hidden Agendas - Bypassing GSMA Recommendations on SS7 Networks

Explores vulnerabilities in SS7 networks, revealing how attackers can bypass security measures to intercept messages and steal money. Discusses the implications for 2G/3G users and highlights a critical flaw in current protection tools.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk