Hack In The Box Security Conference Courses

Applying Machine Learning to User Behavior Anomaly Analysis

Explore advanced machine learning techniques for user behavior anomaly detection in cybersecurity, covering feature selection, data quality, behavioral whitelisting, and neural network predictions.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Hacking a Hospital for Fun and Profit

Revealing security vulnerabilities in hospital networks through penetration testing, exposing risks in medical devices, software, and systems for improved healthcare cybersecurity.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

ProdSec - A Technical Approach

Explore product security strategies, including risk management, automation, and attack surface reduction. Learn how to integrate security into development processes and foster a security-conscious culture within organizations.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

A Deep Dive Into Malicious Documents

Comprehensive analysis of malicious Office documents, covering macro analysis, obfuscation techniques, shellcode execution, and OS X targeting. Equips attendees to handle various maldoc threats.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Faster, Wider, Greater - Modern Pentest Tricks

Explore modern pentesting techniques, tools, and procedures for efficient data processing and analysis. Learn about Jython, PyInstaller, CSVKit, Impacket, Frida, and GNU Parallel to enhance your security auditing skills.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

How to Find and Exploit Bugs in IoT Devices - Kelvin Wong

Explore in-depth IoT device security, including hardware hacks, forensic approaches, and exploitation techniques for routers, IP cameras, and smart TVs. Learn practical skills for conducting your own device hacking.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Behaviors and Patterns of Rogue Hosting Providers

Exploration of rogue hosting providers' behaviors, patterns, and impact on cybercrime. Insights into threat intelligence techniques for identifying and combating abusive hosting services, with focus on Dutch infrastructure.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Radio Exploitation 101

Explore radio exploitation fundamentals, wireless attack types, and live demos. Learn to bridge IP network skills to wireless domain, understanding mechanics and awareness of radio-based network vulnerabilities.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Neuralfuzz - Neural Networks for Fuzzing Web Apps

Explore neural network-based fuzzing for web apps, enhancing coverage and efficiency in identifying vulnerabilities through machine learning and intelligent payload generation.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

XFLTReaT - A New Dimension In Tunnelling

XFLTReaT: An open-source tunnelling framework for bypassing network restrictions. Simplifies development of custom tunnels, supports various protocols, and offers easy configuration and use for network professionals.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Get to the Money - Hacking PoS and PoP Systems

Exploración detallada de vulnerabilidades en sistemas de punto de venta, demostrando vectores de ataque y discutiendo la seguridad de sistemas POS modernos, con énfasis en SAP POS.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

A Year in the Red

Explore advanced red team tactics, including domain fronting, ADFS attacks, and sandbox evasion. Gain insights into offensive and defensive strategies for the coming year.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Spy Vs Spy - A Modern Study Of Microphone Bugs

Investigación detallada sobre micrófonos ocultos modernos, sus características y métodos de detección, con experimentos prácticos y desarrollo de una herramienta de código abierto basada en SDR para detectarlos.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

200+ Vulnerabilities in Android Phones

Revealing 200+ vulnerabilities in Samsung Android phones, focusing on authentication bypass and system crashes. Demonstrates fragmentation issues and compares with Google's AOSP, offering insights into Android security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Unstructured Data Is the New Gold - ML + NLP Is the New Shiz

Explore machine learning and natural language processing for cybersecurity intelligence, leveraging unstructured data from social media and online sources to gain an edge in threat identification.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk