Hack In The Box Security Conference Courses

A Practical Introduction to BLE Security Without Any Special Hardware

Hands-on lab exploring Bluetooth Low Energy security vulnerabilities using simulated devices. Learn to assess and exploit common BLE weaknesses without specialized hardware.

• YouTube
• 2 hours 20 minutes
• On-Demand
• Conference Talk

Writing Bare-Metal ARM Shellcode

Learn to write ARM shellcode for IoT devices, covering ARM architecture, system calls, and techniques for creating compact, reliable payloads. Includes hands-on labs and a demo of exploiting an ARM-based IoT device.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Fuzzing - Finding Your Own Bugs and 0days

Aprenda a criar e usar um fuzzer para encontrar bugs e vulnerabilidades, incluindo técnicas para escrever exploits e obter acesso a sistemas. Demonstrações práticas incluídas.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Spoofing Your Location on iOS Without Jailbreaking

Explore a physical hardware device for GPS spoofing on non-jailbroken iPhones, offering a flexible and accurate solution beyond traditional app-based methods.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Inside the Mind of a Threat Actor - Beyond Pentesting

Explore the distinctions between pentesting and red teaming, delving into tools, techniques, and career paths. Gain insights on becoming a red team operator and valuable resources for professional growth.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Blue Team Visibility

Explore strategies for enhancing blue team threat detection capabilities, leveraging multiple data sources to stay ahead of sophisticated attackers in an ever-evolving cybersecurity landscape.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

The Art of Exploiting Logical Flaws in Web Applications

Exploring techniques to detect and exploit logical vulnerabilities in web applications, focusing on manual testing methods and real-world examples from bug bounty programs.

• YouTube
• 1 hour 10 minutes
• On-Demand
• Conference Talk

The Work of Cyber in the Age of Mechanical Reproduction

Explore how advanced threat actors systematize and scale malware operations, and learn to analyze relationships between campaigns, malware families, and threat actors in this cybersecurity deep dive.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Subverting BitLocker With One Vulnerability

Discover a novel vulnerability in TPM that compromises BitLocker encryption, allowing VMK extraction without physical access. Learn about the sleep mode exploit and its impact on system security.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

The Road Towards 365 Bugs in Microsoft Office 365

Discover vulnerabilities in Microsoft 365 applications, including cross-tenant privacy leaks, SQLi, CSRF, SSRF, and XSS. Learn bug hunting techniques and tips for testing new Office 365 features.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

AEZAKMI - Browser Anonymity & Fingerprinting Bypass

Explore AEZAKMI, a tool for browser anonymity and fingerprinting bypass. Learn how it obfuscates common parameters to enhance online privacy and support multi-account usage.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Conference Talk

Jailbreaks Never Die - Exploiting iOS 13.7

Unveiling iOS 13.7 exploit chain: kernel vulnerabilities, mitigation bypasses, and techniques for reading/writing kernel memory. Insights into iOS security research and jailbreak development.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Android RATs Detection With a Machine Learning-Based Python IDS

Explore Android RATs detection using machine learning and Python IDS. Learn about dataset creation, Slips IDS implementation, and live demo of RAT activity detection in mobile device network traffic.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Anatomy of Automated Account Takeovers

Explore the end-to-end process of automated account takeovers, including attack methodologies, technical innovations, and strategies for capitalizing on ATOs. Learn about UX-centric security measures to combat this growing threat.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

PEsidious - Create Mutated Evasive Malware Using AI

Explore AI-powered malware mutation techniques using Generative Adversarial Networks and Deep Reinforcement Learning to create evasive samples, challenging traditional detection methods and enhancing cybersecurity defenses.

• YouTube
• 1 hour 7 minutes
• On-Demand
• Conference Talk