nullcon Courses

InfoSec Deep Learning in Action

Explore deep learning applications in cybersecurity, including use cases, data pipelines, algorithms, and real-world deployment challenges. Learn how AI can combat ransomware and other cyber threats.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

XNU Heap Exploitation - From Kernel Bug to Kernel Control

Exploración detallada de la explotación del heap XNU, analizando dos vulnerabilidades del kernel y tres exploits. Cubre internos de XNU, técnicas de explotación y cambios entre versiones de iOS.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The One Weird Trick SecureROM Hates - Vol. 2

Exploring checkm8 vulnerability in iOS SecureROM, its exploitation for jailbreaking, and updates on pongoOS development. Insights into cross-platform challenges and future plans for iOS security research.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk

Don't Ruck Us Too Hard - Owning All of Ruckus AP Devices

Explore vulnerabilities in Ruckus AP devices, including pre-authentication remote code execution exploits. Learn about research methods, discovered CVEs, and a framework for cross-architecture analysis.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Rage Against the IDOR's - Using Machine Learning Models to Detect and Stop Authorization Bypass Vulnerabilities

Explore ML techniques to detect and prevent authorization bypass vulnerabilities in web applications, focusing on successful attacks and minimizing false positives.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Bug Bounty - Why Is This Happening

Explore bug bounty programs' challenges and realities from multiple perspectives, offering insights into their evolution, limitations, and potential for improvement in cybersecurity.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Basic Security Analysis on Data and Information

Learn essential digital security techniques for analyzing data and information, focusing on threat identification, communication safety, and practical tools for journalists and civil society groups.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

HackIM CTF - Do's and Don'ts

Explore CTF competitions: learn security through challenges in web, crypto, reverse engineering, and more. Gain insights on dos and don'ts for successful participation in HackIM CTF.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Early Detection of Malicious Patterns in Event-Streaming Data

Explore advanced techniques for detecting malicious patterns in event streams using behavioral indicators and machine learning, focusing on early detection and automated pattern discovery.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Introduction to STIX - TAXII 2 Standards

Comprehensive overview of STIX/TAXII 2 standards for Cyber Threat Intelligence, covering key concepts, data models, and interoperability challenges in threat intelligence sharing.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

How to Use Bug Bounty to Start a Career in Silicon Valley

Discover how to leverage bug bounty programs to kickstart a career in cybersecurity and become a competitive candidate for top tech companies in Silicon Valley.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Introducing the ASVS 4.0

Explore OWASP ASVS 4.0 updates, new controls, and industry applications. Learn about modern web app security, architecture changes, and a novel attack technique.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Side-Channel Attacks

Explore side-channel attacks and machine learning in cybersecurity with expert Stjepan Picek. Learn practical techniques, profiling methods, and key outcomes in this informative webinar.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Unleashing D* on Android Kernel Drivers

Explore techniques for detecting vulnerabilities in Android kernel drivers using static analysis and fuzzing, with focus on DR.CHECKER and DIFUZE tools.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

White-Stingray - Bypassing Stingray Detectors

Explore IMSI catcher detection techniques, evaluate Android apps' effectiveness, and learn about White-Stingray tool for bypassing detectors. Discover vulnerabilities and best practices for mobile security.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk