NahamSec Courses

Hunting for Amazon Cognito Security Misconfigurations

Explore Amazon Cognito security misconfigurations, including unauthorized access, authentication bypass, and privilege escalation. Learn detection techniques and developer recommendations.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

I Hope This Sticks - Analyzing ClipboardEvent Listeners for XSS

Explore ClipboardEvent listeners as potential XSS vectors in web applications. Learn techniques for identifying and exploiting vulnerabilities to enhance your offensive security skills.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Read The Bleeping RFC - Understanding Network Protocols for Security

Explore RFC vulnerabilities and their impact on web security with Inti De Ceukelaire. Learn to identify and exploit logic flaws in protocols for more effective bug hunting and penetration testing.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Command-Line Data-Wrangling for Security Professionals

Mastering command-line tools for efficient data manipulation in offensive security. Learn sorting, regex, grep, find, and JSON processing to enhance your hacking capabilities.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Story of an RCE on Apple Through Hot Jar Swapping

Discover how Frans Rosen achieved remote code execution on Apple through hot jar swapping. Learn about the research, exploit, and analysis behind this impressive security finding.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Reversing Web Assembly

Explore techniques for reversing Web Assembly (wasm) in this offensive security talk. Learn key strategies and tools for analyzing and understanding wasm code.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Are Smart Contracts Haunted? - Security Vulnerabilities in Blockchain

Explore smart contract vulnerabilities, including re-entrancy attacks, delegatecall risks, and price oracle issues. Learn from real-world examples and gain insights into securing blockchain applications.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Blackbox Monitoring for Timely Bug Detection

Discover effective blackbox monitoring techniques for timely bug detection in web applications. Learn task-based hybrid approaches, freshness indicators, and risk markers for improved security.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Analyzing a Smart Contract Vulnerability Worth $600,000+ - Smart Contract Series Episode 4

Dive into a critical smart contract vulnerability analysis, exploring a $600,000+ bug in Port Finance and learning how it was identified through a bug bounty program before potential exploitation.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Smart Contract Auditing - Episode 3

Explore smart contract auditing through a real-world example, gaining insights into security practices and vulnerability detection in blockchain technology.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Hacking, Recon, and Breaking Into Cybersecurity - A Conversation with Lilly

Insightful interview with @seclilc on her cybersecurity journey, covering hacking, reconnaissance, tools, work-life balance, and overcoming challenges in the field.

• YouTube
• 1 hour 24 minutes
• Self-Paced
• Free Video

Finding XSS on Apple.com and Building a Proof of Concept to Leak Your PII

Discover how to find XSS vulnerabilities on high-profile websites and create effective proof-of-concept exploits to demonstrate potential data leakage risks.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Continuous Intrusion - Hacking CI Systems

Explore techniques for exploiting vulnerabilities in Continuous Integration systems, focusing on security risks and potential attack vectors in the software development pipeline.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Breaking Into Cloud Wallets - Hacking Crypto Web Apps

Explore cloud wallet vulnerabilities and crypto web app hacking techniques in this talk by @samwcyo, covering blind XSS, SQL injection, and account takeovers in the cryptocurrency ecosystem.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Effectively Finding Vulnerabilities by Debugging the Source Code

Discover effective techniques for identifying vulnerabilities through source code debugging. Learn to enhance your bug hunting skills and improve your ability to find security flaws in software.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk