Hack In The Box Security Conference Courses

Red Wizard – A User-friendly Infrastructure For Red Teams

Introducing Red Wizard: An open-source tool for automated, OPSEC-safe Red Team infrastructure deployment. Streamlines setup with user-friendly wizards, self-documentation, and resilient architecture for efficient cybersecurity testing.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Nomadic Honeypots - How To Create Actionable CTI

Explore Automated Moving Target Defense using nomadic honeypots to create actionable Cyber Threat Intelligence. Learn deception techniques, attacker behaviors, and how to reduce attack surfaces while generating valuable threat insights.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Evolution of Learning - What Cyber Security Training Looks Like in 2023

Explore the evolution of cybersecurity training with expert trainers discussing market changes, pandemic impact, specialized courses, and tips for career advancement in this insightful panel discussion.

• YouTube
• 1 hour 9 minutes
• On-Demand
• Conference Talk

The Myths of Software Security

Exposé of common software security myths, debunking industry surveys, best practices, and popular concepts like "shift left" and SBOMs. Challenges conventional wisdom with evidence-based insights.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

All You Always Wanted to Know About Antiviruses

Demystifying antivirus software: internals, detection methods, and trade-offs. Explores AV engines, whitelists, signatures, real-time monitoring, and network inspection across Windows, Linux, and Android platforms.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Never Gonna Give You Up, Never Gonna Let You Down

Explore 30 years of hacking evolution and its impact on cybersecurity. Learn key insights and prepare for future challenges in the rapidly evolving landscape of digital security and cyberwarfare.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

A Pre-Auth RCE on Leading SSL VPNs

Unveiling critical vulnerabilities in leading SSL VPNs, including pre-auth RCEs and backdoors. Demonstrating exploitation techniques, post-exploitation strategies, and discussing mitigation measures for enterprise security.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Advanced Mutation Fuzzing Method for Wireless Protocols

Explore advanced mutation fuzzing techniques for wireless protocols, covering basics, new fuzzer development, and smart payload mutation. Includes demos on mobile, IoT, and automotive vulnerabilities.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

4G to 5G - New Attacks

Explores vulnerabilities in 5G/4G protocols affecting network operators and consumer devices. Demonstrates new hijacking, bidding down, and battery draining attacks using low-cost tools. Discusses worldwide testing results and potential fixes.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Scare - Static Code Analysis Recognition Evasion

Explore techniques to evade static code analysis tools, including covert data flow, deep call stacks, and taint laundering. Learn how malicious code can be camouflaged to avoid detection.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

Abusing Over-The-Air Client Provisioning

Uncovers vulnerabilities in major phone brands' network settings, allowing attackers to manipulate user data. Demonstrates attack flows and discusses vendor mitigations for these security risks.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Perfidious - Make PE Backdooring Great Again

Explore PErfidious, a Python tool for PE file manipulation and shellcode injection. Learn about its capabilities in bypassing endpoint detection systems and its potential as a modern PE file analysis library.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

How to Detect Fake Faces - Manipulated Images Using CNNs

Explore CNN-based methods for detecting manipulated facial images, including Deepfakes and face merging. Learn effective techniques using low-level and high-level features for automatic detection of facial manipulation.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Hacking Object Detectors Is Just Like Training Neural Networks

Explore techniques for deceiving object detectors by comparing the attack process to neural network training. Learn how applying training techniques can improve adversarial attacks on state-of-the-art systems.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Car Hacking Made Easel

Demonstrating a systematic approach to reverse engineer and exploit car systems through CAN bus communication protocol analysis, packet spoofing, and payload crafting within a month-long prototype build.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk