Hack In The Box Security Conference Courses

Perfidious - Make PE Backdooring Great Again

Explore PErfidious, a Python tool for PE file manipulation and shellcode injection. Learn about its capabilities in bypassing endpoint detection systems and its potential as a modern PE file analysis library.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

How to Detect Fake Faces - Manipulated Images Using CNNs

Explore CNN-based methods for detecting manipulated facial images, including Deepfakes and face merging. Learn effective techniques using low-level and high-level features for automatic detection of facial manipulation.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Hacking Object Detectors Is Just Like Training Neural Networks

Explore techniques for deceiving object detectors by comparing the attack process to neural network training. Learn how applying training techniques can improve adversarial attacks on state-of-the-art systems.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Car Hacking Made Easel

Demonstrating a systematic approach to reverse engineer and exploit car systems through CAN bus communication protocol analysis, packet spoofing, and payload crafting within a month-long prototype build.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Underrated Security Bugs

Explore underrated security bugs with code snippets, exploitation examples, and impact assessments. Learn to identify and understand these overlooked vulnerabilities for better cybersecurity practices.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Activities of the Tick Cyber Espionage Group Over the Last 10 Years

Comprehensive analysis of the Tick cyber espionage group's decade-long activities, focusing on their tactics, malware, and impact on East Asian targets, particularly in Korea and Japan.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Closing Ceremony & CTF Prize Giving Ceremony

Closing ceremony and prize-giving event for the Hack In The Box Security Conference, featuring awards for the Capture The Flag competition winners.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Panic On The Streets Of Amsterdam - PanicXNU 3.0

Explore advanced kernel fuzzing techniques for macOS, including syscall and IOKit fuzzing. Learn about PanicXNU v3's features and its effectiveness in uncovering critical vulnerabilities in Apple's kernel.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Attacking Industrial Remote Controllers

Exploring vulnerabilities in industrial RF remote controllers, revealing security flaws and potential attacks. Includes demos, findings, and recommendations for improving safety in IIoT applications.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

ModJack - Hijacking the MacOS Kernel

Explore a userspace logic bug chain for kernel privilege escalation on macOS, bypassing security measures and loading unsigned kernel extensions. Learn about module hijacking and mitigation techniques.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Reversing Cryptographic Primitives Using Quantum Computing

Explore quantum computing's impact on cryptography, including reversing cryptographic primitives using quantum circuits and real hardware implementations of P-Box, S-Box, CRC-8, and XOR functions.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Compiler Bugs and Bug Compilers

Explore compiler vulnerabilities and malicious modifications in GCC, from accidental bugs to intentional exploits. Learn about compiler stages, potential attack vectors, and strategies for detecting malicious alterations.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Improving Unicode Attacks With Deep Learning

Exploración de ataques Unicode mejorados con aprendizaje profundo, creando un diccionario de caracteres confundibles para desarrollar herramientas ofensivas sofisticadas y nuevos procedimientos de prueba de aplicaciones.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

HDMI - Pwning HDMI For Fun And Profit

Explore HDMI vulnerabilities through protocol analysis, fuzzing techniques, and real-world exploitation, showcasing potential security risks in AV devices and demonstrating practical attack vectors.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Automated Discovery of Logical Privilege Escalation Bugs in Windows 10

Automated discovery of logical privilege escalation vulnerabilities in Windows 10 services, using simulated user interactions and interface calls. Includes methodology, ALPC analysis, and system implementation.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk