nullcon Courses

ElectroVolt - Pwning Desktop Apps Built On Electron

Explore vulnerabilities in Electron-based desktop apps, including novel attack vectors for remote code execution, with demonstrations on popular applications like Discord and VSCode.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

A Kernel Hacker Meets Fuchsia OS

Explore Fuchsia OS from a security perspective as a Linux kernel expert examines its architecture, design principles, and potential vulnerabilities, offering insights for both developers and security professionals.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Hack The Bridge

Explore blockchain bridge designs, security vulnerabilities, and real-world exploits. Learn about smart contract risks, best practices, and the impact of hacks on cross-chain value transfer systems.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Do We Get Stuff Done? We Don't Get Stuff Done? Or Do We? Or Will We?

Exploring web security's 20-year stagnation, this talk examines past mistakes and proposes future solutions, aiming to renovate mindsets and break the cycle of recurring vulnerabilities.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Breaking Formation - From an Error Message to Internal AWS Infrastructure

Explore a critical AWS CloudFormation vulnerability, its impact on cloud security, and the disclosure process. Gain insights into cloud infrastructure vulnerabilities and future research directions.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Analysis - The Dangerous Role of Deep Links

Explore the security risks of deep links in Android apps, focusing on vulnerabilities in Samsung's camera app that allow unauthorized access to sensitive features without permissions.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Reversing and De-Obfuscating Malware with Software Emulation

Hands-on lab exploring real malware samples, demonstrating how software emulation aids in quick analysis of simple and complex malware, including techniques for interacting with and understanding obfuscated code.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Attack Surfaces for 5G Networks

Practical insights into 5G network security, comparing with previous generations. Explores vulnerabilities, implementation differences, and experimental findings. Discusses expectations for the second phase of 5G networks.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Badkeys - Finding Weak Cryptographic Keys At Scale

Discover how to detect weak cryptographic keys at scale using the badkeys tool and service. Learn about past vulnerabilities and new findings in TLS certificates and IoT devices.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

CXO Panel Web3 - The Great Debate

Expert panel discussion on Web3's future, featuring insights from leaders at Trail of Bits, Brave Software, and Ledger. Explores potential impacts, challenges, and opportunities in the evolving blockchain and cryptocurrency landscape.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

GPG Memory Forensics

Techniques for retrieving passphrases and encryption keys from memory dumps of GPG processes, including Volatility3 plugins for key material extraction and potential defensive applications against ransomware.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

How to Bypass AM-PPL & Disable EDRs - A Red Teamer's Story

Explore techniques to bypass Microsoft's AM-PPL technology and disable EDR products, presented by experienced red team leaders. Learn about vulnerabilities in Windows security measures and their potential exploitation.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

A Broken Commercial Metaverse-Based Virtual Office Platform

Exposé des vulnérabilités critiques dans les plateformes de bureau virtuel du métavers, avec démonstrations d'attaques et recommandations de sécurité pour les développeurs et utilisateurs.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Diversity in Bug Hunting

Panel discussion featuring women leaders in tech exploring strategies to increase diversity in bug hunting and cybersecurity, sharing insights and experiences from their roles at major tech companies.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Bug Bounty - Great! Now What?

Panel discussion on bug bounty programs: processes, rewards, transparency, and improving relationships between organizations and security researchers.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk