nullcon Courses

Attack Surfaces for 5G Networks

Practical insights into 5G network security, comparing with previous generations. Explores vulnerabilities, implementation differences, and experimental findings. Discusses expectations for the second phase of 5G networks.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Badkeys - Finding Weak Cryptographic Keys At Scale

Discover how to detect weak cryptographic keys at scale using the badkeys tool and service. Learn about past vulnerabilities and new findings in TLS certificates and IoT devices.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

CXO Panel Web3 - The Great Debate

Expert panel discussion on Web3's future, featuring insights from leaders at Trail of Bits, Brave Software, and Ledger. Explores potential impacts, challenges, and opportunities in the evolving blockchain and cryptocurrency landscape.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

GPG Memory Forensics

Techniques for retrieving passphrases and encryption keys from memory dumps of GPG processes, including Volatility3 plugins for key material extraction and potential defensive applications against ransomware.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

How to Bypass AM-PPL & Disable EDRs - A Red Teamer's Story

Explore techniques to bypass Microsoft's AM-PPL technology and disable EDR products, presented by experienced red team leaders. Learn about vulnerabilities in Windows security measures and their potential exploitation.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

A Broken Commercial Metaverse-Based Virtual Office Platform

Exposé des vulnérabilités critiques dans les plateformes de bureau virtuel du métavers, avec démonstrations d'attaques et recommandations de sécurité pour les développeurs et utilisateurs.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Diversity in Bug Hunting

Panel discussion featuring women leaders in tech exploring strategies to increase diversity in bug hunting and cybersecurity, sharing insights and experiences from their roles at major tech companies.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Bug Bounty - Great! Now What?

Panel discussion on bug bounty programs: processes, rewards, transparency, and improving relationships between organizations and security researchers.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Finding and Exploiting Bugs in TLS Libraries Used by Smart UPS Devices

Explore zero-click vulnerabilities in smart UPS devices, uncovering potential remote takeover risks and physical threats. Includes demonstration of exploits and discussion on cybersecurity implications.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Careful Who You Trust - Compromising P2P Cameras At Scale

Explore vulnerabilities in P2P protocols used by smart cameras, including Kalay Platform analysis, device-specific exploits, and remote code execution demonstrations. Learn about IoT security risks and mitigation strategies.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Digital Identity in the Age of Fintech

CXO panel explores digital identity protection in fintech, discussing latest security technologies and strategies to safeguard user data in the evolving financial technology landscape.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Fuzzware - Automating & Scaling Fuzzing For Firmware

Automated firmware testing using Fuzzware: emulate and fuzz embedded systems without hardware. Discover vulnerabilities in network stacks and scale security analysis for diverse devices.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

GNU Anastasis - Privacy-Preserving Key Backup And Recovery

Explore GNU Anastasis, a privacy-focused key backup and recovery system. Learn about its cryptographic design, system architecture, and integration possibilities for enhanced digital security and self-custody solutions.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

High-Assurance Code Reviews - How Consulting Works When the Risks Are High

Insights into high-stakes code reviews for critical software. Learn techniques for rapid, effective security assessments of cryptographic libraries, cloud-native software, and smart contracts from Trail of Bits' CEO.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Ransomware Considered Hazardous To Your Health

Explore evolving ransomware threats and tactics, analyzing data from thousands of incidents to provide deep insights and contrarian perspectives on this critical cybersecurity issue.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Conference Talk