NorthSec Courses

Getting Ahead of the Elliptic Curve

Demystifying elliptic curve cryptography: explore its applications in HTTPS, Bitcoin, and beyond. Learn about point addition, ECDH, digital signatures, and post-quantum algorithms without deep mathematical knowledge.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Exploits in Wetware

Exploits in wetware: social engineering techniques, OSINT strategies, and defensive measures against human vulnerabilities in cybersecurity, based on real-world experiences.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

One Step Before Game Hackers - Instrumenting Android Emulators

Explore native hooking on Android emulators, understanding process start routines and emulation strategies. Learn why existing frameworks fail and how to create one that works for game cheating.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Data Breaches - Barbarians in the Throne Room

Analyze hundreds of data breach disclosures to understand common vulnerabilities, focusing on preventable issues like patching and configuration failures, and their impact on enterprises.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Prototype Pollution Attacks in NodeJS Applications

Explore prototype pollution attacks in NodeJS, including APIs vulnerable to pollution, potential impacts, and defensive strategies. Learn from real-world examples and security research findings.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

The Blackbear Project

Explore a modified OpenSSH daemon that enhances post-exploitation capabilities, bypasses network restrictions, and provides reliable interactive shell access for penetration testing and security research.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Evading Vulnerability Exploitation Through Secure Android Development

Explore Android security challenges, common attack vectors, and best practices for secure development. Learn to protect consumers from evolving mobile threats.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Abusing Webhooks for Command and Control

Explore techniques for establishing covert command and control communication using webhooks, bypassing strict network defenses and avoiding detection in penetration testing scenarios.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Don't Kill My Cat

Evade antivirus and security layers with polyglot files and assembly obfuscation. Learn to create undetectable payloads for penetration testing using a versatile tool.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Hacking POS Systems

Explore PoS system vulnerabilities, from physical access to data extraction. Learn about kiosk breakouts, privilege escalation, and real-world examples of critical security flaws in hotel management platforms.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Data Science Tools and Techniques for the Blue Team

Explore data science tools and techniques for cybersecurity, including statistical analysis and machine learning, to enhance threat detection and defense capabilities in large-scale corporate environments.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

How Surveillance Law was Expanded in Canada - What the Media has Reported - What’s Next

Explore Canada's expanded surveillance laws, media coverage, court cases, and future implications for cybercrime investigations and individual privacy rights.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Practical Uses of Program Analysis - Automatic Exploit Generation

Explore automatic exploit generation through program analysis techniques, including instrumentation and symbolic execution, with practical demonstrations and tool insights.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Inter VM Data Exfiltration - The Art of Cache Timing Covert Channel on x86 Multi-Core

Explore cache timing covert channels in x86 multi-core systems, learning techniques for inter-VM data exfiltration and reverse shell establishment using shared resources and architecture imperfections.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Privacy, Surveillance & Oversight

Explore privacy, surveillance, and oversight in the digital age, examining historical context, legal frameworks, and democratic principles shaping modern data collection practices.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk