Hack In The Box Security Conference Courses

How MySQL Servers Can Attack YOU

Novel attack vector using compromised MySQL servers to target clients, demonstrating remote code execution vulnerabilities in MySQL tools and libraries, including a zero-day exploit bypassing security patches.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Bypassing Anti-Cheats and Hacking Competitive Games

Explore game cheating techniques, anti-cheat mechanisms, and bypassing methods in competitive gaming. Gain insights into the evolving landscape of game security and hacking strategies.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

A Tale of Building a Real Full Speed Anti-Censorship Router

Comprehensive guide to building a high-speed anti-censorship router, covering GFW history, bypass methods, protocols, deployment strategies, and practical implementation for unrestricted internet access.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Advanced DMA Reentrancy Techniques to Escape QEMU

Explore advanced DMA reentrancy techniques for QEMU escape, including DMA Reflection/Refraction and DMA Oriented Programming. Learn about vulnerabilities, exploit processes, and future challenges in virtualization security.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Hunting Windows Desktop Window Manager Bugs

Exploring Windows Desktop Window Manager vulnerabilities, focusing on DirectComposition UserSpace. Covers architecture, attack surfaces, and specific CVEs, offering insights into bug hunting techniques and security implications.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

SOHO Hacking at Pwn2Own

Exploring vulnerabilities in home routers and small business devices, detailing methodologies for finding and exploiting security flaws, and demonstrating real-world attack scenarios in SOHO networks.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Next Generation Virtualization-Based Obfuscators

Explores next-gen virtualization-based code obfuscation techniques, focusing on target-specific instruction sets and intertwined VM components to enhance resilience against deobfuscation attacks.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Nakatomi Space - Lateral Movement as L1 Post-Exploitation in OT

Explore lateral movement techniques in OT networks, focusing on vulnerabilities in L1 devices. Learn about BPCS/SIS architectures, exploit chains, and hardening strategies to enhance industrial control system security.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Syscalls in Shellcode - Techniques for Malicious Functionality

Explore advanced techniques for using Windows syscalls in shellcode, overcoming portability issues, and enhancing malicious functionality. Learn about ShellWasp tool and novel WoW64 syscall invocation methods for stealthy code execution.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

XRP Raid Protector - Killing A Critical Bug Worth 40 Billion Dollars

Unveiling a critical 8-year-old vulnerability in XRP Ledger that could compromise $40 billion in assets. Explores the RCE exploit, potential profit methods, and network control implications for blockchain security.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Current State of iOS Malware Detection

Comprehensive overview of iOS malware detection techniques, covering known samples, automated and manual detection methods, and potential improvements for enhanced security.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Upgrading Rollback Agnostic Replay Attacks

Explore car hacking techniques, focusing on radio frequencies and BLE. Learn about Rolling Codes analysis and practical steps to conduct research on vehicle security vulnerabilities.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

The Return of Stack Overflows in the Linux Kernel

Exploiting Linux kernel vulnerabilities: techniques for bypassing security controls, leveraging nftables bugs, and achieving code execution. Includes mitigation strategies and a novel per-softirq stack randomization implementation.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Feeding Gophers to Ghidra

Improve Golang binary analysis in Ghidra with Java-based scripts. Recover strings, functions, and types for efficient malware research and vulnerability detection.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Exploring JARM – An Active TLS Fingerprinting Algorithm

Exploring JARM: An active TLS fingerprinting algorithm for clustering servers, identifying default settings, and detecting malicious servers. Includes C++ implementation, technical analysis, and improvements to enhance fingerprint confidence.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk