nullcon Courses

Do PDF Tools Conform to the Specification

Explore a novel type checker enforcing PDF specifications, uncovering deviations in tools and contributing to improvements in the PDF 2.0 standard. Learn about SPARTA and PDFFixer for enhanced PDF file management.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Cloud Services for Financial Inclusion - Possibilities and Challenges

Panel discussion exploring cloud services' potential and challenges for financial inclusion, featuring insights from cybersecurity experts and industry leaders.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Raining CVEs on WordPress Plugins with Semgrep

Leveraging Semgrep to identify vulnerabilities in WordPress plugins, reducing false positives, and automating XSS validation. Includes demos on custom rule creation and the XSSBomb tool.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Consumer Bug Bounty Panel - Tech Bug Bounty Panel - Hear from the Program Managers

Panel discussion with program managers sharing insights on running bug bounty programs, challenges faced, and best practices for organizations.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Handling a Bug Bounty Program from a Blue Team Perspective

Strategies for blue teams to manage bug bounty programs effectively, balancing security needs with researcher experience. Focuses on mitigating operational risks and optimizing defense rules for real threats.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Service Workers vs Corporate Firewalls

Explore how service workers can be exploited to bypass corporate firewalls, potentially compromising network security. Learn about this innovative attack vector and its implications.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Hack the Source - Securing OSS – One Bug At A Time

Insights into securing open source software through HackerOne programs and Internet Bug Bounty. Learn approaches for targeting OSS, reporting processes, and recent interesting bug discoveries.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Impact of Disruptive Technologies on CISO's Career & Progression

Panel discussion exploring how emerging technologies affect CISO careers, featuring insights from industry leaders on adapting to evolving cybersecurity challenges and opportunities.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

ElectroVolt - Pwning Desktop Apps Built On Electron

Explore vulnerabilities in Electron-based desktop apps, including novel attack vectors for remote code execution, with demonstrations on popular applications like Discord and VSCode.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

A Kernel Hacker Meets Fuchsia OS

Explore Fuchsia OS from a security perspective as a Linux kernel expert examines its architecture, design principles, and potential vulnerabilities, offering insights for both developers and security professionals.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Hack The Bridge

Explore blockchain bridge designs, security vulnerabilities, and real-world exploits. Learn about smart contract risks, best practices, and the impact of hacks on cross-chain value transfer systems.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Do We Get Stuff Done? We Don't Get Stuff Done? Or Do We? Or Will We?

Exploring web security's 20-year stagnation, this talk examines past mistakes and proposes future solutions, aiming to renovate mindsets and break the cycle of recurring vulnerabilities.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Breaking Formation - From an Error Message to Internal AWS Infrastructure

Explore a critical AWS CloudFormation vulnerability, its impact on cloud security, and the disclosure process. Gain insights into cloud infrastructure vulnerabilities and future research directions.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Analysis - The Dangerous Role of Deep Links

Explore the security risks of deep links in Android apps, focusing on vulnerabilities in Samsung's camera app that allow unauthorized access to sensitive features without permissions.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Reversing and De-Obfuscating Malware with Software Emulation

Hands-on lab exploring real malware samples, demonstrating how software emulation aids in quick analysis of simple and complex malware, including techniques for interacting with and understanding obfuscated code.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk