Hack In The Box Security Conference Courses

Quark Engine

Innovative Android malware analysis engine using criminal law principles. Develops a scoring system with five stages to assess malicious activities, overcoming obfuscation techniques through a specialized Dalvik bytecode loader.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Walk Through Access Control Systems

Exploring vulnerabilities in biometric access control systems, including server command forgery, unauthorized user addition, and face database exposure. Demonstrates exploits to leak employee data and bypass security measures.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

A Review of Modern Code Deobfuscation Techniques

Explore modern code deobfuscation techniques, from basic analysis to advanced semantic-based methods. Learn limitations of syntactic approaches and discover state-of-the-art program synthesis techniques.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Qiling Framework - Build a Fuzzer Based on a 1day Bug

Learn to build a fuzzer using Qiling Framework, exploring cross-platform binary analysis and leveraging 1day bugs to potentially uncover 0day vulnerabilities. Hands-on lab covers installation, fundamentals, and advanced techniques.

• YouTube
• 1 hour 54 minutes
• On-Demand
• Conference Talk

Runtime Memory Analysis Tool for Mobile Apps

Runtime memory analysis tool for mobile apps, automating common checks during penetration testing. Simplifies reverse engineering of obfuscated code for iOS and Android, tracking app behavior changes in real-time.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

MemoryRanger Comes to the Rescue Again

MemoryRanger: A hypervisor-based solution to protect Windows kernel memory from attacks on NTFS structures, handle tables, and token privileges, using VT-x and EPT technologies.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Car Hacking Virtual Lab

Explore vehicle architecture, CANbus protocol, CAN frames, and car hacking tools in this hands-on virtual lab. Learn from experts in automotive security and gain practical skills in vehicle system penetration testing.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

The Secret Codes Tell the Secrets

Exploración de códigos secretos en dispositivos Android, revelando vulnerabilidades de seguridad y métodos de bypass en teléfonos de principales fabricantes. Incluye demostraciones prácticas y herramientas de fuzzing.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Breakout Script of the Westworld - Tianwen Tang & Wei Xiao

Exploración de técnicas modernas de explotación para productos de virtualización de VMware, incluyendo ejemplos prácticos de escape de Workstation y ESXi, y discusión de primitivas de explotación avanzadas.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

How Hardware Boundaries Define Platform Security

Exploring how hardware component boundaries impact platform security, focusing on outsourced components, supply chain risks, and threat modeling gaps in modern hardware architectures.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Firmware Hacking With Ghidra

Hands-on firmware hacking workshop using Ghidra for reverse engineering ARM Cortex-M architecture, followed by live demonstration of hardware glitching attacks on microcontrollers.

• YouTube
• 1 hour 31 minutes
• On-Demand
• Conference Talk

Prisoner Number 6

Exploring security vulnerabilities in privileged Linux containers, demonstrating exploitation methods on Play-with-Docker platform, and showcasing techniques to access host systems and networks.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Building Next-Gen Security Analysis Tools With Qiling Framework

Explore Qiling Framework for advanced security analysis, including cross-platform emulation, fuzzing, malware sandboxing, and IoT vulnerability research. Learn to build customized tools efficiently.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Pwning Adobe Reader Multiple Times With Malformed Strings

Exploiting Adobe Reader vulnerabilities through malformed strings, revealing four critical security flaws including information disclosure and code execution risks.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Ridiculous Radios

Explore four unconventional, home-built software-defined radios using simple methods and common parts. Learn innovative approaches to wireless experimentation and protocol hacking from a leading security researcher.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk