Hack In The Box Security Conference Courses

Kernel Exploitation with a File System Fuzzer

Explore kernel exploitation using a filesystem fuzzer, uncovering vulnerabilities and demonstrating R/W primitive attacks and control flow hijacking in Linux systems.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

The Weakest Element of Acquiring Bank Infrastructure

Exploring vulnerabilities in Terminal Management Systems for card payments, revealing potential security risks in acquiring bank infrastructure and POS terminals.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

SAP RCE - The Agent Who Spoke Too Much

Explore SAP vulnerabilities: authentication bypass, OS command injection, and privilege escalation. Learn to decrypt sensitive files, manipulate security reports, and implement protective measures.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Hacking the DevOps Butler - From Nothing to Admin

Explore Jenkins vulnerabilities and exploitation techniques, focusing on two critical flaws that allow unauthenticated attackers to gain admin access and control entire infrastructures.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Jackpotting Fortune-500 Treasuries

Unveiling critical vulnerabilities in ERP systems, demonstrating how attackers can manipulate financial processes and exploit Oracle's ERP for unauthorized monetary gains without detection.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Operation SemiChimera

Análisis detallado de ataques APT a la industria de semiconductores en Taiwán, enfocándose en Operation SemiChimera. Explora técnicas, tácticas y motivaciones de los atacantes, ofreciendo insights para mejorar la ciberseguridad del sector.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Two Strategies for Supply Chain Attacks

Explore two supply chain attack strategies by BARIUM APT group, analyzing real-world cases and their tactics. Learn defensive measures against these sophisticated cyber threats.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Exploring Deficiencies in Automatic Vuln Mining Technology

Exploring deficiencies in automatic vulnerability mining tools and proposing a new technique to improve software security through analysis of popular tools and creation of challenging example codes.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Common Flaws in ICS Network Protocols

Análisis de vulnerabilidades comunes en protocolos de red ICS, incluyendo públicos y privados. Demuestra ataques potenciales como inyección de comandos y sniffing de tráfico sin cifrado en infraestructuras críticas.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

DevSecOps, Chaos Security, and Not Being Left Behind

Exploring DevSecOps and Chaos Security Engineering to integrate business, development, and security teams for effective product security and staying ahead of adversaries.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

HTTP Statuses as C2 Commands and Compromised TLS

Explore innovative malware techniques using HTTP statuses as C2 commands and compromising TLS encryption. Learn about COMPFun's evolution and its impact on cybersecurity.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Serverless Security - Attack & Defense

Explore serverless security vulnerabilities and defenses across AWS, Azure, and GCP. Learn about dependency poisoning, validation errors, and insecure defaults with practical demos and prevention strategies.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Python for Enhanced OPSEC

Python-based tool for enhancing OPSEC by autonomously posting on social media, using NLP and ML to mimic user behavior. Ideal for those needing to abandon targeted accounts without alerting adversaries.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Exploring and Exploiting the SQLite

Explore SQLite vulnerabilities, auditing strategies, and fuzzing techniques. Learn about Magellan 2.0, shadow tables, and bypassing defense mechanisms for remote code execution in Chrome and SQLite binaries.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Car Hacking

Explore car hacking essentials: CAN types, UDS, ISO TP, MOST/LIN/Flexray/Automotive Ethernet protocols. Gain insights from industry experts in this virtual lab on automotive cybersecurity.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk