Hack In The Box Security Conference Courses

JARM Randomizer - Evading JARM Fingerprinting

Explore JARM fingerprinting evasion techniques and a JARM randomizer proxy for C2 channels. Learn about challenges, future improvements, and strategies to avoid blocklists in TLS-based fingerprinting.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

AWS GuardDuty - Post-DNS Era Covert Channel For C&C

Exploring advanced covert communication techniques for malware, including DNS tunneling, cloud services exploitation, and AWS GuardDuty evasion. Discusses mitigation strategies and common security pitfalls.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

5G Networks and Interconnect Threats

Explore 5G network interconnect security, focusing on roaming vulnerabilities, attack vectors, and protective measures. Learn about signaling firewalls and potential risks to user privacy.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

How I Found 16 Microsoft Office Excel Vulnerabilities in 6 Months

Discover the process of finding 16 Microsoft Excel vulnerabilities through fuzzing, including corpus selection, mutation algorithms, and result management techniques.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Security Analysis and Practical Attacks of LPWAN

Análisis de seguridad y ataques prácticos a redes LPWAN, enfocándose en LoRaWAN y NB-IoT. Explora vulnerabilidades en la cadena de suministro y módulos, compartiendo hallazgos y recomendaciones para mejorar la seguridad.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Binary Fuzzing With Snapshot-Assisted-Driven Comparison Branch Analysis

Innovative binary fuzzing technique using snapshot-assisted comparison branch analysis to efficiently find vulnerabilities in complex software, overcoming limitations of traditional symbolic execution methods.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Attacking Cloud Native Kubernetes With CDK

Exploración detallada de técnicas avanzadas para comprometer clústeres de Kubernetes en la nube, incluyendo escape de contenedores y ataques de red. Demostración práctica usando la herramienta CDK.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Exploitation With Shell Reverse & Infection With PowerShell

Exploración de técnicas de shell reverso y infección con PowerShell, demostrando ataques dirigidos y analizando la eficacia de soluciones de seguridad de endpoints.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

The History of Adversarial AI

Comprehensive overview of AI security evolution, exploring vulnerabilities in modern AI systems and offering insights from extensive research to raise awareness about potential threats and protective measures.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Model Robustness Will Hurt Data Privacy?

Exploring the trade-off between AI model robustness and data privacy, revealing how adversarial training may increase vulnerability to privacy attacks and data reconstruction from gradient information.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Shaping the Future of the 0Day Market

Shaping the future of the 0-day vulnerability market through improved standards, platforms, and practices to enhance cybersecurity capabilities for law enforcement and intelligence agencies.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

A Journey Into Synology NAS

Exploring Synology NAS security: environment setup, device fingerprinting, local services analysis, remote access flow, and vulnerability discoveries from local and remote perspectives.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

When Qiling Framework Meets Symbolic Execution

Exploring Qiling Framework's new symbolic execution capabilities for advanced binary analysis across architectures, with demonstrations and insights into its development and applications.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

WoW Hell - Rebuilding Heaven's Gate

Explore WoW64 architecture, its translation mechanisms, and potential vulnerabilities. Learn about reverse engineering techniques and bypassing security measures in Windows systems.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Attacking Fast Charging Electric Vehicles

Análisis de seguridad en protocolos de carga rápida para vehículos eléctricos, incluyendo vulnerabilidades y ataques potenciales usando la herramienta "XCharger" para pruebas y explotación.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk