Hack In The Box Security Conference Courses

Squashing Low-hanging Fruit in Embedded Software

Automated vulnerability discovery in embedded TCP/IP stacks using binary analysis, symbolic execution, firmware inspection, and live network traffic.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Summer of Fuzz - MacOS

Learn to fuzz macOS userland binaries, file parsers, and network services while debugging and triaging crashes.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Exploiting UAF by Ret2bpf in Android Kernel

Examines exploiting an Android kernel use-after-free vulnerability with ret2bpf, bypassing CONFIG_ARM64_UAO, and achieving local privilege escalation.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Make JDBC Attacks Brilliant Again

A technical analysis of JDBC attack derivations, root causes, and exploitation paths from XXE to RCE, including disclosed zero-day vulnerabilities.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

SHADOWPAD - Chinese Espionage Malware-as-a-Service

An investigation of SHADOWPAD’s plugin-based malware ecosystem, customer business model, user clusters, and impact on China-based espionage operations.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Dissecting Phishing Techniques of CloudDragon APT

Technical analysis of CloudDragon’s phishing sites, 2FA bypass methods, evolving campaigns, and associated malware across Windows and Android.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

A QEMU Black Box Escape Via USB Device

An analysis of CVE-2020-14364 and a method for escaping a QEMU virtual machine through a USB device without relying on prior system information.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

The Rise of Potatoes - Privilege Escalation in Windows Services

Examines Windows service privilege escalation from SERVICE to SYSTEM, including SeImpersonatePrivilege abuse, Potato exploits, and a new NTLM relay attack.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Hack Out of the Box - Discovering 10+ Vulnerabilities in VirtualBox

Explore how a specialized fuzzer uncovered 10+ VirtualBox vulnerabilities, from attack-surface analysis to exploit primitives and a demonstrated virtual-machine escape.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Mind the Bridge - A New Attack Model for Hybrid Mobile Applications

Examines JavaScript bridge vulnerabilities in hybrid mobile apps, introducing a new attack model, automated vetting tool, and RichInterface mitigation.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

The State of Mobile Security

A keynote on smartphone attacks, signs of compromise, mobile EDR/DFIR investigations, and accessible mobile-device self-defense.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

One Stop Anomaly Shop

A hands-on demonstration of OSAS, an open-source machine learning framework for customizable anomaly-detection pipelines and security threat analysis.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Utilizing Lol-Drivers in Post Exploitation Tradecraft

A practical demonstration of using signed Windows drivers and IOCTLs to add kernel-mode capabilities to red-team post-exploitation, including credential dumping, process injection, and C2.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

MacOS Security - Escaping The Sandbox & Bypassing TCC

Examines macOS sandboxing and TCC permissions, including bypasses enabling sandbox escapes, permission theft, and privilege escalation.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Should You Be Afraid of Hands-On Payment Devices?

Explores how hackers break and clone point-of-sale terminals to cash out despite anti-tampering and cryptographic protections.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk