Hack In The Box Security Conference Courses

Framework to Examine Mobile App Privacy

Framework for examining mobile app privacy, focusing on user control over data, consent, and compliance with global regulations. Includes automatic tools and findings from top apps, highlighting pervasive privacy issues.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Fuzzing RDP Client and Server

Exploring innovative techniques to fuzz RDP protocol using WinAFL, uncovering vulnerabilities in both client and server implementations for enhanced remote connection security.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Securing Webviews and The Story Behind CVE-2021-21136

Exploración detallada de problemas de seguridad en WebViews de aplicaciones móviles, incluyendo validación de URL, aislamiento y filtración de datos. Incluye el descubrimiento de CVE-2021-21136 en Chromium.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Malware Protocol Simulations in Distributed Networks

Explore advanced malware protocol simulations for distributed networks, enhancing threat detection and defense strategies through realistic Command & Control traffic replication without using actual malware.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Container Escape in 2021

Explore new methods for escaping privileged runc containers, focusing on cloud security vulnerabilities and innovative exploit techniques in container environments.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Protective DNS - Why It Matters and Deploying It With No Cloud

Explore on-premise protective DNS using RPZ for network security without cloud reliance. Learn motives, methods, and implementation from internet pioneer Dr. Paul Vixie.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Going Deeper Into Schneider Modicon PAC Security

Exploración profunda de vulnerabilidades en controladores Modicon PAC de Schneider, analizando protocolos de comunicación privados y mecanismos de protección por contraseña. Incluye demostraciones de ataques y recomendaciones defensivas.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

IDA2Obj - Static Binary Instrumentation on Steroids

Explore static binary instrumentation with IDA2Obj, a tool for dumping object files from executables. Learn implementation, challenges, and integration with fuzzing engines for efficient code coverage collection.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Scaling Up Offensive Pipelines

Innovative approach to offensive CI/CD pipelines for red and purple team operations, automating weaponization and evasion techniques using Infrastructure as Code and Kubernetes.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Practical AI Red Teaming - A Facial Recognition Case Study

Practical insights into AI red teaming for facial recognition systems, exploring vulnerabilities, attack methods, and defense strategies in real-world environments.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Taking Ghidra to the Next Level

Enhancing Ghidra: BinCraft's modernization efforts, improved decompilation, and integration of advanced techniques like GraalVM for a more powerful reverse engineering tool.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

What Modern RF Combat Looks Like in the Next Decade

Exploring the future of RF combat: IoT in defense, cyber-EW convergence, jamming, counter-drone solutions, and RF-focused case studies for next-gen battlefield technology and strategy.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Is Attestation All We Need? Fooling Apple's AppAttest API

Exploración detallada de la API AppAttest de Apple, sus vulnerabilidades y limitaciones como solución anti-manipulación, con ejemplos de implementaciones débiles y escenarios de bypass.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Security Technology Arms Race 2021 - Medal Event

Explore the evolving security landscape, examining offensive and defensive strategies, technological breakthroughs, and future trends in cybersecurity. Gain insights into the ongoing arms race between attackers and defenders.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

HATS - Catch Up with Ero Carrera and Sergey Lozhkin

Insightful discussion with cybersecurity experts Ero Carrera and Sergey Lozhkin on advanced threat analysis, reverse engineering, and the role of AI/ML in cybersecurity at HITB2021AMS.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk