NorthSec Courses

Evading Vulnerability Exploitation Through Secure Android Development

Explore Android security challenges, common attack vectors, and best practices for secure development. Learn to protect consumers from evolving mobile threats.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Abusing Webhooks for Command and Control

Explore techniques for establishing covert command and control communication using webhooks, bypassing strict network defenses and avoiding detection in penetration testing scenarios.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Backslash Powered Scanning - Implementing Human Intuition

Innovative web scanner using intuitive techniques to detect injection vulnerabilities, offering WAF evasion, minimal network footprint, and adaptability to input filtering. Explores advanced exploitation methods and handles complex findings.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Don't Kill My Cat

Evade antivirus and security layers with polyglot files and assembly obfuscation. Learn to create undetectable payloads for penetration testing using a versatile tool.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Hacking POS Systems

Explore PoS system vulnerabilities, from physical access to data extraction. Learn about kiosk breakouts, privilege escalation, and real-world examples of critical security flaws in hotel management platforms.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Data Science Tools and Techniques for the Blue Team

Explore data science tools and techniques for cybersecurity, including statistical analysis and machine learning, to enhance threat detection and defense capabilities in large-scale corporate environments.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

How Surveillance Law was Expanded in Canada - What the Media has Reported - What’s Next

Explore Canada's expanded surveillance laws, media coverage, court cases, and future implications for cybercrime investigations and individual privacy rights.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Practical Uses of Program Analysis - Automatic Exploit Generation

Explore automatic exploit generation through program analysis techniques, including instrumentation and symbolic execution, with practical demonstrations and tool insights.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Inter VM Data Exfiltration - The Art of Cache Timing Covert Channel on x86 Multi-Core

Explore cache timing covert channels in x86 multi-core systems, learning techniques for inter-VM data exfiltration and reverse shell establishment using shared resources and architecture imperfections.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Privacy, Surveillance & Oversight

Explore privacy, surveillance, and oversight in the digital age, examining historical context, legal frameworks, and democratic principles shaping modern data collection practices.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

NorthSec 2015 - Jean Francois Cloutier & Francois Gagnon - CHEKS

Explore the science and technology behind the Chaotic Encryption Key System (CHEKS), including its concept, implementation, and practical application in a basic chat demo.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Threat Modeling for the Gaming Industry

Explore gaming industry security challenges, focusing on client-side logic, network protocols, account management, and untrusted platforms to enhance overall security and user experience.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

OO RE with HexraysCodeXplorer

Explore object-oriented reverse engineering techniques for modern malware analysis, focusing on C++ code reconstruction and tools like HexRaysCodeXplorer for tackling complex malware frameworks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Hopping on the CAN Bus

Learn to hack your car's CAN bus using an open-source toolkit. Explore CAN basics, attack methods, hardware/software tools, diagnostic protocols, and security implications for modern vehicles.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

10 Things I Wish I Knew Before My First Incident

Essential insights for effective incident response, covering crucial aspects often overlooked by beginners. Learn from real-world experiences to enhance your preparedness and decision-making during critical cybersecurity events.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk