Hack In The Box Security Conference Courses

Adversarial Attacks on Autonomous Cars - The Missed Gap

Explore adversarial attacks on autonomous vehicles, examining the gap between academia and industry, and discussing potential vulnerabilities in AI-driven transportation systems.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

HWallet - The Simple Cryptocurrency Hardware Wallet

Explore the creation of a simple cryptocurrency hardware wallet, focusing on hardware acceleration, code optimization, and Bitcoin processing techniques.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

The Road to iOS Sandbox Escape

Exploring iOS sandbox vulnerabilities through mach message IPC, revealing potential exploits in various daemons. Includes research tools and demonstrations of discovered vulnerabilities in Apple's mobile devices.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Exploiting Automation in LTE Mobile Networks

Exploración de vulnerabilidades en la automatización de redes LTE, demostrando métodos de ataque y discutiendo contramedidas para operadores y usuarios finales.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

File Structures - Another Binary Exploitation Technique

Exploring FILE structure exploitation in Glibc to bypass modern OS protections, demonstrating remote code execution techniques and File Stream Oriented Programming.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Blockchain and Smart Contract Attack Vectors

Explore blockchain vulnerabilities, smart contract issues, and topology attacks. Learn best practices for mitigating risks in decentralized systems and Ethereum-based platforms.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Cognitive Automation With Machine Learning In Cybersecurity

Explore cognitive automation and machine learning in cybersecurity, covering risk analytics, threat detection, and incident management. Learn how ML enhances fraud detection and security operations.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Monitoring Native Execution in WoW64 Apps

Explore advanced techniques for monitoring and injecting 64-bit code into WoW64 processes, overcoming security challenges and OS limitations to enhance application security.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

SayaKenaHack - Breach Notification in Malaysia

Exploring Malaysia's data breach crisis, breach notification challenges, and the underground data trading community. Insights on improving breach notification laws and protecting citizen data.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Generic and Static Detection of Mobile Malware Using ML

Explore machine learning techniques for generic, static detection of mobile malware, focusing on Android but applicable to iOS. Learn about the research methodology, workflow, and results.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Demystifying the Definitions of Dark

Demystifying deep web, dark web, and related terms. Clarifies misconceptions, explores definitions, and offers a new perspective on internet classification.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

KLara - Your New Friend

Cloud-based Yara scanner for efficient malware detection. Scans large malware libraries at high speeds, enhancing threat intelligence and APT hunting capabilities. Open-source project with live demo.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Exposing Hidden Exploitable Behaviors Using EDF

Exposing hidden exploitable behaviors in programming languages using differential fuzzing. Techniques for identifying undocumented functions, OS command execution vulnerabilities, and other security issues.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Over the Edge - Pwning the Windows Kernel

Exploración detallada del subsistema gráfico de Windows, vulnerabilidades del kernel y técnicas de escape del sandbox de Edge, con demostraciones de exploits para elevar privilegios desde el proceso de contenido de Edge a SYSTEM.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Mallet - Towards a Generic Intercepting Proxy

Explore Mallet, a new open-source intercepting proxy with a user-friendly interface, high performance, and extensive protocol support. Learn its advantages over existing tools and potential applications.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk