Hack In The Box Security Conference Courses

Attack Scenarios Abusing Azure Active Directory

Explore Azure AD security vulnerabilities, privilege escalation techniques, and mitigation strategies. Learn to protect your organization's cloud infrastructure from potential attacks and misconfigurations.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

5G Cyber Security Challenges and Solution

Explore 5G network security challenges, solutions, and design principles. Learn about industry collaboration, in-depth defense, zero-trust, and adaptive security for controllable 5G risks.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Modern Post Exploitation - The Ghost In The Cloud

Explore modern post-exploitation techniques in cloud environments, focusing on IAM vulnerabilities in enterprise apps. Learn attacker strategies, discovery methods, and evasion tactics against security tools.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Malicious Contracts

Explore the potential of smart contracts as anonymous rootkit C2 infrastructure, demonstrating their immutability, anonymity, and scalability for controlling infected devices remotely.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Electro-optical Sound Eavesdropping

Explore electro-optical sound eavesdropping techniques, including Lamphone and Glowworm attacks, to recover speech from physical and virtual conversations using light analysis.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Trapfuzzer - Coverage-Guided Binary Fuzzing with Breakpoints

Coverage-guided binary fuzzing tool for vulnerability discovery, featuring test management, mutation tracking, and visualization. Supports multiple architectures and debuggers, with successful application in finding software vulnerabilities.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Framework to Examine Mobile App Privacy

Framework for examining mobile app privacy, focusing on user control over data, consent, and compliance with global regulations. Includes automatic tools and findings from top apps, highlighting pervasive privacy issues.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Fuzzing RDP Client and Server

Exploring innovative techniques to fuzz RDP protocol using WinAFL, uncovering vulnerabilities in both client and server implementations for enhanced remote connection security.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Securing Webviews and The Story Behind CVE-2021-21136

Exploración detallada de problemas de seguridad en WebViews de aplicaciones móviles, incluyendo validación de URL, aislamiento y filtración de datos. Incluye el descubrimiento de CVE-2021-21136 en Chromium.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Malware Protocol Simulations in Distributed Networks

Explore advanced malware protocol simulations for distributed networks, enhancing threat detection and defense strategies through realistic Command & Control traffic replication without using actual malware.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Container Escape in 2021

Explore new methods for escaping privileged runc containers, focusing on cloud security vulnerabilities and innovative exploit techniques in container environments.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Protective DNS - Why It Matters and Deploying It With No Cloud

Explore on-premise protective DNS using RPZ for network security without cloud reliance. Learn motives, methods, and implementation from internet pioneer Dr. Paul Vixie.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Going Deeper Into Schneider Modicon PAC Security

Exploración profunda de vulnerabilidades en controladores Modicon PAC de Schneider, analizando protocolos de comunicación privados y mecanismos de protección por contraseña. Incluye demostraciones de ataques y recomendaciones defensivas.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

IDA2Obj - Static Binary Instrumentation on Steroids

Explore static binary instrumentation with IDA2Obj, a tool for dumping object files from executables. Learn implementation, challenges, and integration with fuzzing engines for efficient code coverage collection.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Scaling Up Offensive Pipelines

Innovative approach to offensive CI/CD pipelines for red and purple team operations, automating weaponization and evasion techniques using Infrastructure as Code and Kubernetes.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk