Hack In The Box Security Conference Courses

FIDLing with Decompilers

Explore decompilation basics, popular tools, and the Hex-Rays Decompiler. Learn about FIDL, a new library simplifying decompiler API usage, with practical examples and demos.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Zen - A Complex Campaign of Harmful Android Apps

Explore Android malware techniques, from repackaging apps to sophisticated rooting trojans. Learn about click fraud, exploit bundling, and persistence mechanisms used by malicious actors.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Secret Flaws of In-DRAM RowHammer Mitigations

Unveiling secret flaws in DRAM RowHammer mitigations, exploring Target Row Refresh implementation, and introducing TRRespass: a RowHammer fuzzer for creative hammering patterns to bypass protections.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

How Adversary Emulation Can Enhance Blue Team Performance

Explore adversary emulation to enhance blue team performance, addressing cybersecurity expert shortages and evolving attack methods. Learn to design attack playbooks and test security products effectively.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Bugrank - A Community Bug Bounty Platform

Introducing Bugrank: an open-source community bug bounty platform. Explore its design, architecture, and functions. Learn how to set up your own bug reporting system for enhanced cybersecurity.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Army of Undead - Tailored Firmware Emulation

Explore automated firmware emulation techniques for embedded systems, covering root filesystem location, architecture identification, and emulation methods using open-source tools and scripts.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Breaking and Securing Cloud Platforms

Comprehensive analysis of cloud security vulnerabilities, real-world attack scenarios, and best practices for securing cloud deployments. Covers data exposure, access control issues, and attacker exploitation techniques.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Fuzzing File System Implementations to Uncover Security Bugs

Explore file system vulnerability research through fuzzing techniques on BSD systems. Learn to identify attack surfaces, automate testing, and uncover security bugs in kernel implementations.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Documents of Doom - Infecting macOS via Office Macros

Explore macOS vulnerabilities through Office macros, analyzing recent attacks and detailing a novel exploit chain that can infect fully-patched systems with minimal user interaction.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Exploiting Directory Permissions on macOS

Explore macOS directory permission vulnerabilities, from arbitrary overwrites to privilege escalation. Learn techniques to control file contents and understand the intricacies of macOS security.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Analyzing Recent Evolutions in Malware Loaders

Análisis detallado de la evolución reciente de los cargadores de malware, sus técnicas de evasión y distribución, y métodos para detectarlos y analizarlos en entornos corporativos.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

The Insecurity of Cloudless Smart Door Systems

Explore vulnerabilities in cloudless smart door systems for large buildings, focusing on IP-gateway security risks and potential exploits in intercom-IP integration.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Open Source Security – Vulnerabilities Never Come Alone

Explore open source security challenges, variant analysis techniques, and real-world case studies. Learn about vulnerabilities in popular software and gain insights from industry expert Fermin J. Serna.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

RIDL - Rogue In Flight Data Load

Unveiling RIDL attacks: exploiting speculative execution vulnerabilities in modern CPUs to steal in-flight data across security boundaries, bypassing existing mitigations and compromising system security.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

LoRaWAN Auditing

Comprehensive guide to LoRaWAN security auditing, covering vulnerabilities, testing methods, and new tools. Provides practical insights for securing IoT deployments in smart cities and industries.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk