Hack In The Box Security Conference Courses

Breaking and Securing Cloud Platforms

Comprehensive analysis of cloud security vulnerabilities, real-world attack scenarios, and best practices for securing cloud deployments. Covers data exposure, access control issues, and attacker exploitation techniques.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Fuzzing File System Implementations to Uncover Security Bugs

Explore file system vulnerability research through fuzzing techniques on BSD systems. Learn to identify attack surfaces, automate testing, and uncover security bugs in kernel implementations.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Documents of Doom - Infecting macOS via Office Macros

Explore macOS vulnerabilities through Office macros, analyzing recent attacks and detailing a novel exploit chain that can infect fully-patched systems with minimal user interaction.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Exploiting Directory Permissions on macOS

Explore macOS directory permission vulnerabilities, from arbitrary overwrites to privilege escalation. Learn techniques to control file contents and understand the intricacies of macOS security.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Analyzing Recent Evolutions in Malware Loaders

Análisis detallado de la evolución reciente de los cargadores de malware, sus técnicas de evasión y distribución, y métodos para detectarlos y analizarlos en entornos corporativos.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

The Insecurity of Cloudless Smart Door Systems

Explore vulnerabilities in cloudless smart door systems for large buildings, focusing on IP-gateway security risks and potential exploits in intercom-IP integration.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Open Source Security – Vulnerabilities Never Come Alone

Explore open source security challenges, variant analysis techniques, and real-world case studies. Learn about vulnerabilities in popular software and gain insights from industry expert Fermin J. Serna.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

RIDL - Rogue In Flight Data Load

Unveiling RIDL attacks: exploiting speculative execution vulnerabilities in modern CPUs to steal in-flight data across security boundaries, bypassing existing mitigations and compromising system security.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

LoRaWAN Auditing

Comprehensive guide to LoRaWAN security auditing, covering vulnerabilities, testing methods, and new tools. Provides practical insights for securing IoT deployments in smart cities and industries.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk

The Road to Building Defendable Systems

Explore challenges faced by CISOs, including threat landscapes, expertise shortages, and compliance burdens. Learn effective strategies for building defendable systems and functioning on the razor's edge of cybersecurity.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Reimplementing Local RPC in .Net

Reimplementing Windows RPC in .NET for privilege escalation, covering ALPC implementation, NDR parsing, and PowerShell integration. Includes bug discovery and tooling demonstration.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

The Impact of Blockchain and Cryptocurrencies

Explore blockchain's impact on currency, governance, and global power dynamics. Discover how this technology challenges traditional financial systems and reshapes national sovereignty.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The Sum of All Fears - When ICS - SCADA Are Compromised

Explore ICS/SCADA cybersecurity threats, attack vectors, and protection strategies. Learn to analyze industrial protocols, write exploits, and implement effective defense measures for critical infrastructure.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

CyptoAPT - APT Attacks on Crypto Exchange Employees

Overview of recent APT attacks on cryptocurrency exchange employees, from spear phishing to Firefox 0-day exploit and malware stages. Compares perspectives of victim, attacker, and security team.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

We Hacked The Planet - Now What?

Explore the evolution of cybersecurity, from hacking to bug bounties, and its impact on policy, workforce, and vulnerability management. Gain insights into future challenges and solutions.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk