Hack In The Box Security Conference Courses

DCART - Decoupled Components for Automated Ransomware Testing

Explore a framework for controlled ransomware testing, focusing on decoupled components for detonation and detection. Learn about design, development, and automated testing methodologies for behavioral ransomware analysis.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Car Hacking - Practical Guide to Automotive Security

Practical guide to automotive security, focusing on CAN bus hacking. Learn to reverse-engineer packets, identify arbitration IDs, perform replay attacks, and explore hardware tools for vehicle network security.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Insight Into TTPs Of A Middle Eastern Threat Actor

Insight into Middle Eastern threat actor MuddyWater's tactics, including spear-phishing, backdoors, and cyber espionage. Explores recent tool evolution, obfuscation techniques, and prevention strategies.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Exploiting Zoom on MacOS

Exploración detallada de una vulnerabilidad de ejecución remota de código en el cliente Zoom para macOS, incluyendo técnicas de ingeniería inversa y explotación aplicables a otras aplicaciones.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Securing Cyber-Physical Systems - Moving Beyond Fear

Exploring cybersecurity challenges in physical systems, this talk examines root causes of vulnerabilities and proposes systemic approaches to embed security in design, moving beyond fear-based tactics.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

4G LTE Man in the Middle Attacks With a Hacked Femtocell

Explore 4G LTE vulnerabilities through femtocell hacking, including rooting techniques, portability modifications, and man-in-the-middle attacks. Learn to exploit small cell access networks for security research.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Bypassing Hardware-Based Trusted Boot Through x86 Downgrade

Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Creating a Fuzzer for Diameter and LTE Telecom Protocols

Explore creating a fuzzer for Diameter protocol in LTE networks, covering architecture, challenges, and lessons learned in discovering vulnerabilities in telecom equipment.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

The CISO's Dilemma

Exploring CISO challenges: threat landscape, expertise shortage, product obsolescence, and compliance burdens. Insights from effective CISOs on navigating these complexities in enterprise defense.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Physical to Cyber and Back - Fingerprint Scanner Security

Exploring vulnerabilities in fingerprint scanners and access control systems, demonstrating physical-to-virtual attacks, and discussing network persistency techniques in IoT devices.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

DFEx - DNS File Exfiltration

Explore DNS file exfiltration techniques, including a unique protocol for bypassing NG Firewalls. Learn about HIPS tricks and innovative approaches to data transfer across networks.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Modern Automotive Attack Surfaces

Explore modern automotive cybersecurity threats, including V2X technologies, smart batteries, and wireless keys. Learn about vulnerabilities in upcoming car features and their implications for future vehicle security.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Tracking Fake News Based on Deep Learning

Innovative deep learning model for tracking fake news authors by analyzing content and stylistic features, enabling identification of attackers spreading malicious rumors for financial gain.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Security Should Be Smarter Not Harder

Explore cybersecurity strategies, bug bounty programs, and hacker motivation with Katie Moussouris. Learn about industry myths, perverse incentives, and practical solutions for smarter security practices.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Hacking Jenkins

Exploring Jenkins vulnerabilities, including dynamic routing misuse and Groovy sandbox escape. Learn to build custom gadgets and exploit Jenkins through unconventional methods.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk