nullcon Courses

Finding and Exploiting Bugs in TLS Libraries Used by Smart UPS Devices

Explore zero-click vulnerabilities in smart UPS devices, uncovering potential remote takeover risks and physical threats. Includes demonstration of exploits and discussion on cybersecurity implications.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Careful Who You Trust - Compromising P2P Cameras At Scale

Explore vulnerabilities in P2P protocols used by smart cameras, including Kalay Platform analysis, device-specific exploits, and remote code execution demonstrations. Learn about IoT security risks and mitigation strategies.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Digital Identity in the Age of Fintech

CXO panel explores digital identity protection in fintech, discussing latest security technologies and strategies to safeguard user data in the evolving financial technology landscape.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Fuzzware - Automating & Scaling Fuzzing For Firmware

Automated firmware testing using Fuzzware: emulate and fuzz embedded systems without hardware. Discover vulnerabilities in network stacks and scale security analysis for diverse devices.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

GNU Anastasis - Privacy-Preserving Key Backup And Recovery

Explore GNU Anastasis, a privacy-focused key backup and recovery system. Learn about its cryptographic design, system architecture, and integration possibilities for enhanced digital security and self-custody solutions.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

High-Assurance Code Reviews - How Consulting Works When the Risks Are High

Insights into high-stakes code reviews for critical software. Learn techniques for rapid, effective security assessments of cryptographic libraries, cloud-native software, and smart contracts from Trail of Bits' CEO.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Ransomware Considered Hazardous To Your Health

Explore evolving ransomware threats and tactics, analyzing data from thousands of incidents to provide deep insights and contrarian perspectives on this critical cybersecurity issue.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Conference Talk

Cloud Security Posture Management & Threat Protection

Learn cloud security best practices, resource hardening, security posture tracking, and threat protection from industry experts. Gain insights on securing cloud resources and improving visibility.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Android Pentesting

Learn Android architecture, analysis types, and SSL pinning bypass methods to kickstart your journey into Android penetration testing. Gain practical insights and tool knowledge for mobile security assessment.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

CVE-2018-9206 Workshop

Hands-on workshop exploring CVE-2018-9206 file upload vulnerability in Docker. Learn about causes, patches, and bypasses for this security flaw through practical exploitation exercises.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Hunting Android Malware with Importance Of Yara

Explore Android malware hunting using YARA framework. Learn techniques to identify and track malicious apps, even without direct access, and discover methods for detecting similar variants in the wild.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

AI vs. Pandemic

Explore how artificial intelligence is being leveraged to combat pandemics, discussing innovative applications and potential future developments in healthcare.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Red, Purple, and Blue Team Activity Using Azure

Hands-on workshop exploring Red, Blue, and Purple team activities using Azure components. Learn container deployment, routing, attack simulation, detection, and prevention techniques in a practical cybersecurity setting.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Technical Breakdown of Magecart - The Digital Bank Robbery

Detailed analysis of Magecart attacks on e-commerce sites, exploring how attackers steal credit card data through client-side JavaScript and strategies to protect against these threats.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Dangling Packages Leading to RCE

Explore dependency confusion attacks and how unclaimed packages in project files can lead to remote code execution. Learn about real-world vulnerabilities and mitigation strategies.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk