Hack In The Box Security Conference Courses

Never Gonna Give You Up, Never Gonna Let You Down

Explore 30 years of hacking evolution and its impact on cybersecurity. Learn key insights and prepare for future challenges in the rapidly evolving landscape of digital security and cyberwarfare.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

A Pre-Auth RCE on Leading SSL VPNs

Unveiling critical vulnerabilities in leading SSL VPNs, including pre-auth RCEs and backdoors. Demonstrating exploitation techniques, post-exploitation strategies, and discussing mitigation measures for enterprise security.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Advanced Mutation Fuzzing Method for Wireless Protocols

Explore advanced mutation fuzzing techniques for wireless protocols, covering basics, new fuzzer development, and smart payload mutation. Includes demos on mobile, IoT, and automotive vulnerabilities.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

4G to 5G - New Attacks

Explores vulnerabilities in 5G/4G protocols affecting network operators and consumer devices. Demonstrates new hijacking, bidding down, and battery draining attacks using low-cost tools. Discusses worldwide testing results and potential fixes.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Scare - Static Code Analysis Recognition Evasion

Explore techniques to evade static code analysis tools, including covert data flow, deep call stacks, and taint laundering. Learn how malicious code can be camouflaged to avoid detection.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

Abusing Over-The-Air Client Provisioning

Uncovers vulnerabilities in major phone brands' network settings, allowing attackers to manipulate user data. Demonstrates attack flows and discusses vendor mitigations for these security risks.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Perfidious - Make PE Backdooring Great Again

Explore PErfidious, a Python tool for PE file manipulation and shellcode injection. Learn about its capabilities in bypassing endpoint detection systems and its potential as a modern PE file analysis library.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

How to Detect Fake Faces - Manipulated Images Using CNNs

Explore CNN-based methods for detecting manipulated facial images, including Deepfakes and face merging. Learn effective techniques using low-level and high-level features for automatic detection of facial manipulation.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Hacking Object Detectors Is Just Like Training Neural Networks

Explore techniques for deceiving object detectors by comparing the attack process to neural network training. Learn how applying training techniques can improve adversarial attacks on state-of-the-art systems.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Car Hacking Made Easel

Demonstrating a systematic approach to reverse engineer and exploit car systems through CAN bus communication protocol analysis, packet spoofing, and payload crafting within a month-long prototype build.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Underrated Security Bugs

Explore underrated security bugs with code snippets, exploitation examples, and impact assessments. Learn to identify and understand these overlooked vulnerabilities for better cybersecurity practices.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Activities of the Tick Cyber Espionage Group Over the Last 10 Years

Comprehensive analysis of the Tick cyber espionage group's decade-long activities, focusing on their tactics, malware, and impact on East Asian targets, particularly in Korea and Japan.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Closing Ceremony & CTF Prize Giving Ceremony

Closing ceremony and prize-giving event for the Hack In The Box Security Conference, featuring awards for the Capture The Flag competition winners.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Panic On The Streets Of Amsterdam - PanicXNU 3.0

Explore advanced kernel fuzzing techniques for macOS, including syscall and IOKit fuzzing. Learn about PanicXNU v3's features and its effectiveness in uncovering critical vulnerabilities in Apple's kernel.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Attacking Industrial Remote Controllers

Exploring vulnerabilities in industrial RF remote controllers, revealing security flaws and potential attacks. Includes demos, findings, and recommendations for improving safety in IIoT applications.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk