OffensiveCon Courses

Automating Your Job? The Future of AI and Exploit Development

Explore the intersection of AI and exploit development in this keynote examining how automation impacts security professionals and the future of the field.

• YouTube
• 1 hour 7 minutes
• Self-Paced
• Free Video

Android In-The-Wild: Unexpectedly Excavating a Kernel Exploit

Dive into the unexpected discovery of an Android kernel exploit in the wild, exploring real-world vulnerabilities and exploitation techniques.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

UEFI and the Task of the Translator: Cross-Architecture UEFI Quines for Exploit Development

Explore UEFI exploit development using cross-architecture UEFI quines as a framework, enhancing your understanding of low-level system vulnerabilities.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Free Video

Blasting Past WebP - Exploring Image Format Vulnerabilities

Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

The V8 Heap Sandbox - Understanding JavaScript Engine Security

Explore V8 engine's heap sandbox implementation, its security implications, and potential vulnerabilities in Chrome's JavaScript engine.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Attacking Windows Device Drivers: Almost Escaping the Sandbox

Explore techniques for attacking Windows device drivers and potential sandbox escape methods in this advanced security analysis presentation.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Defense Through Offense: Microcontroller Security in Meta's First Generation of Smart Glasses

Explore microcontroller security in Meta's smart glasses, focusing on defense strategies through offensive techniques and real-world applications.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Escaping the Safari Sandbox: A Tour of Webkit IPC

Explore Webkit IPC vulnerabilities and techniques for escaping the Safari sandbox, gaining insights into browser security and exploitation.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

ACE up the Sleeve: Hacking into Apple's New USB-C Controller

Explore Apple's USB-C controller vulnerabilities and hacking techniques with expert Thomas Roth in this cutting-edge cybersecurity presentation.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

How to Fuzz Your Way to Android Universal Root: Attacking Android Binder

Entdecken Sie Techniken zur Ausnutzung von Android Binder-Schwachstellen für Root-Zugriff durch Fuzzing-Methoden und Sicherheitsanalyse.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Attacking the Samsung Galaxy A Boot Chain

Explore Samsung Galaxy A* boot chain vulnerabilities and attack techniques for enhanced mobile security understanding.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Half Measures and Full Compromise: Exploiting Microsoft Exchange PowerShell Remoting

Explore Microsoft Exchange PowerShell Remoting vulnerabilities and exploitation techniques for enhanced cybersecurity awareness and defense strategies.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

The Mines of Kakadûm: Blindly Exploiting Load-Balanced Services

Explore techniques for blindly exploiting load-balanced services in "The Mines of Kakadûm" presentation, uncovering vulnerabilities in distributed systems.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Booting with Caution: Dissecting Secure Boot's Third-Party Attack Surface

Dissect Secure Boot's third-party attack surface, exploring vulnerabilities and potential exploits in boot processes.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Beyond Android MTE: Navigating OEM's Logic Labyrinths

Explore advanced Android security, focusing on Memory Tagging Extension (MTE) and OEM-specific implementations. Gain insights into exploiting vulnerabilities in custom logic.

• YouTube
• 49 minutes
• Self-Paced
• Free Video