nullcon Courses

ICS SCADA Security Analysis of a Beckhoff CX5020 PLC

Análisis de seguridad de un PLC Beckhoff CX5020 utilizado en sistemas SCADA, revelando vulnerabilidades y demostrando formas de obtener control sobre el programa y el sistema operativo.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Mobile Self Defence

Explore mobile network vulnerabilities and learn self-defense strategies using SnoopSnitch, an Android app that detects common attacks like IMSI catchers and SIM exploits.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

ECMA Script 6 from an Attacker's Perspective

Explore ECMA Script 6 from a security perspective, covering new language features, potential attack vectors, and strategies to mitigate risks in modern web browsers.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

The Windows Sandbox Paradox

Explore Windows sandboxing challenges, security vulnerabilities, and OS limitations. Learn about unexpected behaviors, bugs in popular applications, and strategies for auditing sandbox implementations.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Hacking Your Cable TV Network

Explore cable TV network vulnerabilities and attacks, including analog and digital systems, IRD decoders, and management servers. Learn techniques for hijacking set-top boxes and remote shutdown.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Phoneypdf - A Virtual PDF Analysis Framework

Explore tools and techniques for analyzing malicious PDF files, including phoneypdf framework. Learn to leverage Adobe PDF DOM and XFA for deeper insights into PDF exploitation and JavaScript execution.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Multi-Value WiFi - What the Heck Is It

Explore multi-value WiFi, its security implications, and latest developments in cloud Wi-Fi. Learn to leverage wireless technology as a business driver and protect against threats in enterprise environments.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Fuzzing the Easy Way Using Zulu

Explore fuzzing binary protocols with Zulu, a GUI-based tool for easy capture, mutation, and replay. Learn its features and successful bug-finding applications.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

O'Dea Assertions Untwining the Security of the SAML Protocol

Explore SAML protocol security, including XML signature attacks, attribute implementation, and fuzzing techniques. Learn to identify and mitigate vulnerabilities in SSO systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Advanced Smartphone Forensics

Explore advanced smartphone forensics techniques for iOS, Windows Phone, and BlackBerry, focusing on cloud backups, data encryption, and device tracking protocols.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Attacking WPA-WPA2 in the Cloud

Explore cloud-based techniques for cracking WPA/WPA2 Personal and Enterprise, leveraging massive compute power to perform large-scale dictionary attacks on wireless networks.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

The Security Challenge

Keynote explores rising security challenges, sophisticated threats, and future risks in the digital economy, emphasizing the need for unified security to protect data and infrastructure.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Bug Bounty Programs - Crowd Sourcing Security

Explore Mozilla's bug bounty program, its history, benefits, and challenges. Learn how to implement similar programs and their advantages over black market alternatives.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Inception of Graphical Passwords

Explore innovative graphical password authentication, offering enhanced security and memorability compared to traditional alphanumeric methods. Learn implementation techniques and future possibilities.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

SMS to Meterpreter - Fuzzing USB Modems

Explore innovative attacks on USB data modems, including fuzzing techniques and SMS payload execution. Learn about vulnerabilities, reverse engineering, and USB sniffing for offensive security research.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk