Hack In The Box Security Conference Courses

Auditable & Provable Privacy of Smart Speakers

Explore smart speaker privacy vulnerabilities, including skill squatting and eavesdropping, and learn about potential solutions like hardware mic disconnects and user awareness.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Vote of No Confidence - Second Factor Correctness

Explora la seguridad y verificabilidad del voto electrónico, proponiendo un innovador protocolo de autenticación de dos factores para garantizar la integridad electoral sin comprometer la privacidad.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

DHCP Is Hard

Explore DHCP vulnerabilities and exploits in popular implementations, including dnsmasq, ISC DHCP, and systemd networkd, with insights on architecture and attack techniques.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Capture This - Real Time Packet Processing With FPGAs

Explore real-time packet processing using FPGAs, focusing on Ethernet connections, FPGA architecture, and implementing network applications with hardware-level optimizations.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

NTLM Relay Is Dead, Long Live NTLM Relay

Explore NTLM relay attacks, their evolution, and modern exploitation techniques. Learn about vulnerabilities in Windows protocols and browsers, with insights on defense strategies.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Glitch Chronicles - Turning WebGL Into A Hammer

Explore WebGL vulnerabilities and GPU-based Rowhammer attacks in this technical deep dive on exploiting graphics hardware for security breaches.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Attacking Industrial Wireless Mesh Networks

Exploración detallada de vulnerabilidades en redes inalámbricas industriales, enfocándose en WirelessHART e ISA100.11a. Incluye demostraciones prácticas de ataques y herramientas de sniffing.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Extracting Messages From iCloud - Vladimir Katalov

Explore techniques for extracting messages from iCloud, covering iCloud security basics, data protection, and accessing stored messages. Learn about encryption, token policies, and iCloud sync settings.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

IPv666 - Address of the Beast

Explore IPv6 security implications, addressing schemes, and potential vulnerabilities. Learn about honeypot servers, machine learning applications, and techniques for identifying aliased networks in IPv6 environments.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Adversarial Attacks on Autonomous Cars - The Missed Gap

Explore adversarial attacks on autonomous vehicles, examining the gap between academia and industry, and discussing potential vulnerabilities in AI-driven transportation systems.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

HWallet - The Simple Cryptocurrency Hardware Wallet

Explore the creation of a simple cryptocurrency hardware wallet, focusing on hardware acceleration, code optimization, and Bitcoin processing techniques.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

The Road to iOS Sandbox Escape

Exploring iOS sandbox vulnerabilities through mach message IPC, revealing potential exploits in various daemons. Includes research tools and demonstrations of discovered vulnerabilities in Apple's mobile devices.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Exploiting Automation in LTE Mobile Networks

Exploración de vulnerabilidades en la automatización de redes LTE, demostrando métodos de ataque y discutiendo contramedidas para operadores y usuarios finales.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

File Structures - Another Binary Exploitation Technique

Exploring FILE structure exploitation in Glibc to bypass modern OS protections, demonstrating remote code execution techniques and File Stream Oriented Programming.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Blockchain and Smart Contract Attack Vectors

Explore blockchain vulnerabilities, smart contract issues, and topology attacks. Learn best practices for mitigating risks in decentralized systems and Ethereum-based platforms.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk