Hack In The Box Security Conference Courses

Two Strategies for Supply Chain Attacks

Explore two supply chain attack strategies by BARIUM APT group, analyzing real-world cases and their tactics. Learn defensive measures against these sophisticated cyber threats.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Exploring Deficiencies in Automatic Vuln Mining Technology

Exploring deficiencies in automatic vulnerability mining tools and proposing a new technique to improve software security through analysis of popular tools and creation of challenging example codes.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Common Flaws in ICS Network Protocols

Análisis de vulnerabilidades comunes en protocolos de red ICS, incluyendo públicos y privados. Demuestra ataques potenciales como inyección de comandos y sniffing de tráfico sin cifrado en infraestructuras críticas.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

DevSecOps, Chaos Security, and Not Being Left Behind

Exploring DevSecOps and Chaos Security Engineering to integrate business, development, and security teams for effective product security and staying ahead of adversaries.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

HTTP Statuses as C2 Commands and Compromised TLS

Explore innovative malware techniques using HTTP statuses as C2 commands and compromising TLS encryption. Learn about COMPFun's evolution and its impact on cybersecurity.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Serverless Security - Attack & Defense

Explore serverless security vulnerabilities and defenses across AWS, Azure, and GCP. Learn about dependency poisoning, validation errors, and insecure defaults with practical demos and prevention strategies.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Python for Enhanced OPSEC

Python-based tool for enhancing OPSEC by autonomously posting on social media, using NLP and ML to mimic user behavior. Ideal for those needing to abandon targeted accounts without alerting adversaries.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Exploring and Exploiting the SQLite

Explore SQLite vulnerabilities, auditing strategies, and fuzzing techniques. Learn about Magellan 2.0, shadow tables, and bypassing defense mechanisms for remote code execution in Chrome and SQLite binaries.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Car Hacking

Explore car hacking essentials: CAN types, UDS, ISO TP, MOST/LIN/Flexray/Automotive Ethernet protocols. Gain insights from industry experts in this virtual lab on automotive cybersecurity.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

FIDLing with Decompilers

Explore decompilation basics, popular tools, and the Hex-Rays Decompiler. Learn about FIDL, a new library simplifying decompiler API usage, with practical examples and demos.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Zen - A Complex Campaign of Harmful Android Apps

Explore Android malware techniques, from repackaging apps to sophisticated rooting trojans. Learn about click fraud, exploit bundling, and persistence mechanisms used by malicious actors.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Secret Flaws of In-DRAM RowHammer Mitigations

Unveiling secret flaws in DRAM RowHammer mitigations, exploring Target Row Refresh implementation, and introducing TRRespass: a RowHammer fuzzer for creative hammering patterns to bypass protections.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

How Adversary Emulation Can Enhance Blue Team Performance

Explore adversary emulation to enhance blue team performance, addressing cybersecurity expert shortages and evolving attack methods. Learn to design attack playbooks and test security products effectively.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Bugrank - A Community Bug Bounty Platform

Introducing Bugrank: an open-source community bug bounty platform. Explore its design, architecture, and functions. Learn how to set up your own bug reporting system for enhanced cybersecurity.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Army of Undead - Tailored Firmware Emulation

Explore automated firmware emulation techniques for embedded systems, covering root filesystem location, architecture identification, and emulation methods using open-source tools and scripts.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk