NorthSec Courses

Safer Online Sex - Harm Reduction and Queer Dating Apps

Explore safer online dating for queer communities through harm reduction strategies, focusing on user-centric safety, privacy, and security in app design and personal tech choices.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Threat Hunting in the Cloud

Explore cloud security challenges, attacker strategies, and effective threat hunting techniques in AWS and Azure environments. Learn to protect against and detect sophisticated cloud-based attacks.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

What is Our Ethical Obligation to Ship Secure Code?

Explore ethical obligations in secure coding, data breaches, and developer responsibilities. Gain insights on improving security practices and addressing user privacy concerns.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Trick or Treat - Unveil the "Stratum" of the Mining Pools

Unveil mining pool strategies, identify Stratum servers, and explore cryptomining malware detection techniques through static and dynamic analysis, web scraping, and network scanning.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Where Do We Go From Here? - Stalkerware, Spouseware, and What We Should Do About It

Explore stalkerware and spouseware threats, their impact on victims, and potential solutions. Learn about detection, legal aspects, and the role of tech companies in combating these privacy invasions.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

How to Think - About Complex Adversarial Systems

Eleanor Saitta explores advanced security thinking, focusing on patterns, system-wide approaches, and human factors. She discusses key concepts like resource conflicts, intuition, vulnerabilities, and adaptive capacity for effective security practices.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Ichthyology - Phishing as a Science

Explore the psychology of phishing, analyze real-world attacks, and learn evidence-based prevention techniques. Discover how to protect against credential theft and evaluate the effectiveness of phishing training.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Quick Retooling with .NET Payloads

Explore dynamic .NET implants for red teams, focusing on flexible retooling, OpSec, and overcoming static defenses using DLRium Managed Execution toolkit.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Brain Implants and Mind Reading

Explore brain-computer interfaces, their current capabilities, and future implications. Delve into neurotechnology's potential, security concerns, and societal impact as we approach a cyberpunk reality.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Getting Ahead of the Elliptic Curve

Demystifying elliptic curve cryptography: explore its applications in HTTPS, Bitcoin, and beyond. Learn about point addition, ECDH, digital signatures, and post-quantum algorithms without deep mathematical knowledge.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Exploits in Wetware

Exploits in wetware: social engineering techniques, OSINT strategies, and defensive measures against human vulnerabilities in cybersecurity, based on real-world experiences.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

One Step Before Game Hackers - Instrumenting Android Emulators

Explore native hooking on Android emulators, understanding process start routines and emulation strategies. Learn why existing frameworks fail and how to create one that works for game cheating.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Data Breaches - Barbarians in the Throne Room

Analyze hundreds of data breach disclosures to understand common vulnerabilities, focusing on preventable issues like patching and configuration failures, and their impact on enterprises.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Prototype Pollution Attacks in NodeJS Applications

Explore prototype pollution attacks in NodeJS, including APIs vulnerable to pollution, potential impacts, and defensive strategies. Learn from real-world examples and security research findings.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

The Blackbear Project

Explore a modified OpenSSH daemon that enhances post-exploitation capabilities, bypasses network restrictions, and provides reliable interactive shell access for penetration testing and security research.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk