nullcon Courses

How to Use Bug Bounty to Start a Career in Silicon Valley

Discover how to leverage bug bounty programs to kickstart a career in cybersecurity and become a competitive candidate for top tech companies in Silicon Valley.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Introducing the ASVS 4.0

Explore OWASP ASVS 4.0 updates, new controls, and industry applications. Learn about modern web app security, architecture changes, and a novel attack technique.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Side-Channel Attacks

Explore side-channel attacks and machine learning in cybersecurity with expert Stjepan Picek. Learn practical techniques, profiling methods, and key outcomes in this informative webinar.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Unleashing D* on Android Kernel Drivers

Explore techniques for detecting vulnerabilities in Android kernel drivers using static analysis and fuzzing, with focus on DR.CHECKER and DIFUZE tools.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

White-Stingray - Bypassing Stingray Detectors

Explore IMSI catcher detection techniques, evaluate Android apps' effectiveness, and learn about White-Stingray tool for bypassing detectors. Discover vulnerabilities and best practices for mobile security.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Comprehensive Hacker Techniques in Mobile Networks

Explore comprehensive hacker techniques in mobile networks, covering SS7 vulnerabilities, subscriber tracking, call interception, and security measures to counter evolving threats.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Looting Your Bank Savings Using Digital India

Explore vulnerabilities in digital banking systems, including passbook printers, e-wallets, and Aadhaar-based KYC, revealing potential security risks in India's cashless economy initiatives.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

I Boot when U-Boot

Explore a custom bootkit for U-Boot devices, its persistence techniques, and implications for IoT security. Learn about backdooring methods and potential countermeasures.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

How to Interact With Bug Bounty Programs

Learn effective strategies for participating in bug bounty programs, including handling duplicates, prioritizing submissions, and escalating issues. Gain insights into common challenges and best practices.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Injecting Security Into Web Apps With Runtime Patching And Context Learning

Explore advanced web application security techniques using Runtime Application Self Protection (RASP) to prevent code injections and other vulnerabilities through dynamic analysis and patching.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

7 Sins of ATM Protection Against Logical Attacks

Comprehensive exploration of ATM security vulnerabilities, covering kiosk mode bypass, privilege escalation, software flaws, network security, and device management. Insights for enhancing ATM protection.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

How to Be Successful in Azure Bug Bounty

Learn Azure bug bounty strategies from a Microsoft expert, covering attack surfaces, past payouts, and how to start hunting for vulnerabilities in cloud infrastructure.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

DevOpSec - Rapid Security in the AWS Cloud

Explore DevOpSec practices for rapid, secure AWS deployments. Learn collaborative strategies for development, operations, and security teams to achieve compliance in agile environments.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Engineering Better Security at Facebook

Explore Facebook's approach to enhancing security through developer-focused tools and practices, addressing vulnerability prevention and detection in large-scale software development.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Drone Hijacking and Other IoT Hacking with GNU Radio and SDR

Explore IoT security vulnerabilities using SDR and GNU Radio. Learn to intercept, sniff, and hijack wireless devices like drones and keyboards through practical demonstrations and attacks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk