Hack In The Box Security Conference Courses

The Road to Building Defendable Systems

Explore challenges faced by CISOs, including threat landscapes, expertise shortages, and compliance burdens. Learn effective strategies for building defendable systems and functioning on the razor's edge of cybersecurity.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Reimplementing Local RPC in .Net

Reimplementing Windows RPC in .NET for privilege escalation, covering ALPC implementation, NDR parsing, and PowerShell integration. Includes bug discovery and tooling demonstration.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

The Impact of Blockchain and Cryptocurrencies

Explore blockchain's impact on currency, governance, and global power dynamics. Discover how this technology challenges traditional financial systems and reshapes national sovereignty.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The Sum of All Fears - When ICS - SCADA Are Compromised

Explore ICS/SCADA cybersecurity threats, attack vectors, and protection strategies. Learn to analyze industrial protocols, write exploits, and implement effective defense measures for critical infrastructure.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

CyptoAPT - APT Attacks on Crypto Exchange Employees

Overview of recent APT attacks on cryptocurrency exchange employees, from spear phishing to Firefox 0-day exploit and malware stages. Compares perspectives of victim, attacker, and security team.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

We Hacked The Planet - Now What?

Explore the evolution of cybersecurity, from hacking to bug bounties, and its impact on policy, workforce, and vulnerability management. Gain insights into future challenges and solutions.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

DCART - Decoupled Components for Automated Ransomware Testing

Explore a framework for controlled ransomware testing, focusing on decoupled components for detonation and detection. Learn about design, development, and automated testing methodologies for behavioral ransomware analysis.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Car Hacking - Practical Guide to Automotive Security

Practical guide to automotive security, focusing on CAN bus hacking. Learn to reverse-engineer packets, identify arbitration IDs, perform replay attacks, and explore hardware tools for vehicle network security.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Insight Into TTPs Of A Middle Eastern Threat Actor

Insight into Middle Eastern threat actor MuddyWater's tactics, including spear-phishing, backdoors, and cyber espionage. Explores recent tool evolution, obfuscation techniques, and prevention strategies.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Exploiting Zoom on MacOS

Exploración detallada de una vulnerabilidad de ejecución remota de código en el cliente Zoom para macOS, incluyendo técnicas de ingeniería inversa y explotación aplicables a otras aplicaciones.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Securing Cyber-Physical Systems - Moving Beyond Fear

Exploring cybersecurity challenges in physical systems, this talk examines root causes of vulnerabilities and proposes systemic approaches to embed security in design, moving beyond fear-based tactics.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

4G LTE Man in the Middle Attacks With a Hacked Femtocell

Explore 4G LTE vulnerabilities through femtocell hacking, including rooting techniques, portability modifications, and man-in-the-middle attacks. Learn to exploit small cell access networks for security research.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Bypassing Hardware-Based Trusted Boot Through x86 Downgrade

Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Creating a Fuzzer for Diameter and LTE Telecom Protocols

Explore creating a fuzzer for Diameter protocol in LTE networks, covering architecture, challenges, and lessons learned in discovering vulnerabilities in telecom equipment.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

The CISO's Dilemma

Exploring CISO challenges: threat landscape, expertise shortage, product obsolescence, and compliance burdens. Insights from effective CISOs on navigating these complexities in enterprise defense.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk