Hack In The Box Security Conference Courses

API Security Through External Attack Surface Management

Learn how to integrate APIs into External Attack Surface Management to discover exposed assets and improve the security posture of external-facing APIs.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

WIFI Security - From 0 To 1

Step-by-step introduction to WiFi security, covering protocol structure, attack surfaces, WiFi stack auditing, Linux driver vulnerabilities, and protocol fuzzing.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Military Bioweapons Development and Information Warfare

A field-experience briefing on military biological weapons development and precise information-warfare targeting for national defense in the Gulf Cooperation Council region.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

ARM IoT Firmware Extraction and Emulation Using ARMX

Extract IoT firmware from SPI flash, unpack its filesystem, prepare kernels, and build emulated device images with ARMX.

• YouTube
• 1 hour 15 minutes
• Self-Paced
• Conference Talk

EXPLIoT Framework - An Introduction to IoT Security Testing

Learn to use the EXPLIoT framework for IoT security testing and write plugins for new exploits and analysis test cases.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk

How to Defeat EDRs in Usermode

A technical presentation demonstrates usermode EDR bypasses, including PID spoofing, DLL blocking, unhooking, syscalls, manual mapping, and obfuscation.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Attacking Automated Manufacturing Systems

Examines how attackers can compromise robotic and industrial controllers to alter products, damage plants, steal secrets, or injure people.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

When Fuzzing Meets SAP Network Services

Explore fuzzing SAP network services, from custom-protocol test generation and fuzzer adaptation to crash analysis and vulnerability discovery.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Hacking the Planet With Knowledge Graphs

Uses knowledge graphs, graph theory, data science, machine learning, and interactive visualization to plan cybersecurity engagements across complex IT/OT/IoT systems.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Gremlin Apps and Gremlin Botnets

A keynote on turning mobile apps into covert “Gremlin” botnets for targeted attacks and data theft from selected devices.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Security Framework Challenges & Solutions

Explores physical-layer authentication and parameter extraction from commercial wireless radio modules for securing embedded and mobile devices.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Animated Bugs - The New Remote Attack Surface in Telegram

Explore Telegram’s animated-sticker attack surface and discover one-click zero-days using libFuzzer and structure-aware fuzzing.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Hunting for Malicious Infrastructure Using Big Data

A research presentation on extracting HTTP response features and using machine learning to detect malicious command-and-control infrastructure.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Reversing GO Binaries With Ghidra

Reverse engineer Go malware with Ghidra, addressing statically linked binaries, obfuscation, and Linux crypters.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Alt-Payments and Crypto - The Future Is Now

A fast-paced overview of emerging alt-payment and cryptocurrency trends, industry direction, and challenges facing individual and institutional investors.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk