Security BSides London Courses

DNS Tunnelling - It's All in the Name!

Explore DNS tunneling techniques for data exfiltration and command-and-control, including detection methods and practical demonstrations of this stealthy network attack vector.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Finux's Historical Tour of IDS Evasion, Insertions and Other Oddities

Explore the history and limitations of network intrusion detection systems, examining evasion techniques and inherent problems while critically evaluating vendor claims and industry acceptance.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Continuous Security Testing in a DevOps World

Explore continuous security testing in DevOps using BDD-Security framework. Learn to specify requirements, create executable tests, and integrate with CI/CD for on-demand security assessments.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Easy Ways to Bypass Anti Virus Systems

Discover simple techniques to evade antivirus systems, including signature detection, emulation, sandboxing, and firewalls. Learn how attackers can bypass popular security measures with minimal effort and resources.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

CSRFT - A Toolkit for CSRF Vulnerabilities

Explore a Python-based toolkit for exploiting CSRF vulnerabilities, including demos of complex exploitation techniques and a custom HTTP proxy for injecting malicious iframes.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Layers on Layers - Bypassing Security for Fun and Profit V2

Explore kernel vulnerabilities in Windows and their impact on security solutions. Learn how to bypass multiple layers of protection and discuss more robust defensive strategies.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

MITRE D3FEND

Explore MITRE D3FEND, a knowledge graph of cybersecurity countermeasures. Learn about its structure, use cases, and how it complements the ATT&CK framework for enhanced defensive strategies.

• YouTube
• 13 minutes
• Self-Paced
• Conference Talk

DFIR - Don't Forget Your Roots

Explore essential DFIR skills, from understanding applications and APIs to analyzing C2 beacons, with insights from an experienced practitioner's career journey.

• YouTube
• 14 minutes
• Self-Paced
• Conference Talk

Think Zero Days Are Your Biggest Risk - Think Again

Explore cyber hygiene beyond zero-day threats, understanding vulnerabilities and advisories to enhance overall security posture and risk management.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

JWTs and Why They Suck

Explore the pitfalls of JWTs, their unnecessary complexity, and better alternatives for secure authentication in web applications.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Big Data Lake, Big Data Leak

Explore the security risks associated with big data lakes and learn strategies to prevent data leaks in large-scale data storage systems.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

Making Big Datasets Searchable

Explore techniques for efficiently searching and analyzing large datasets, enhancing data accessibility and insights for security professionals.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

MITRE D3FEND

Explore MITRE D3FEND, a framework for cybersecurity defense techniques. Learn about its structure, applications, and how it complements ATT&CK to enhance organizational security posture.

• YouTube
• 13 minutes
• Self-Paced
• Conference Talk

Introduction to Red Team Tooling and Opsec

Explore modern red team techniques, tools, and operational security practices for effective penetration testing and cybersecurity assessments.

• YouTube
• 12 minutes
• Self-Paced
• Conference Talk

Chaos Engineering - Break It On Purpose

Explore chaos engineering principles, benefits, and implementation strategies to enhance system resilience and reliability through controlled failure experiments.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk