Authentication Bypass Courses and Certifications

Black Hat

Bypassing Entra ID Conditional Access - A Deep Dive Into Device Authentication Mechanisms

Explore device authentication in Entra ID, uncovering vulnerabilities in Conditional Access. Learn about attack methods, defense strategies, and gain insights into Microsoft's cloud security infrastructure.

• YouTube
• 31 minutes
• On-Demand
• Free Video

DEFCONConference

Understanding Authentication Bypass Vulnerabilities in Industrial VPN Gateways

Dive into industrial VPN gateway vulnerabilities through detailed analysis of security flaws, session hijacking risks, and hardware security bypass techniques in remote access systems.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Leveraging HTTP Request Smuggling for Authentication Bypass and Remote Code Execution

Delve into HTTP Request Smuggling vulnerabilities, exploring real-world cases of authentication bypass and remote code execution in enterprise applications, with practical detection and mitigation strategies.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Cybersecurity: Web application security & SQL injection

219 ratings at Udemy

Master Techniques to Secure Web Applications Against Common Vulnerabilities and SQL injection with hands-on virtual lab

• Udemy
• 5 hours 21 minutes
• On-Demand
• Paid Course

Complete Web Application Offensive Hacking Course:Pro Hacker

38 ratings at Udemy

An Excellent Practical Course to Ethical Web Hacking. Become a successful Pen tester, Bug bounty Hunter and Pro Hacker.

• Udemy
• 7 hours 45 minutes
• On-Demand
• Paid Course

Black Hat

Stealthily Access Your Android Phones - Bypass the Bluetooth Authentication

Explore Android Bluetooth vulnerabilities, including BlueRepli, and learn stealthy access techniques. Discover security risks in AOSP and mobile manufacturers' oversights.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Black Hat

Preventing Authentication Bypass - A Tale of Two Researchers

Explore techniques for identifying authentication bypass vulnerabilities, learn effective researcher-company partnerships, and discover secure coding practices to prevent similar flaws in web applications.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

USENIX

Inducing Authentication Failures to Bypass Credit Card PINs

Explores vulnerability in EMV credit card transactions, demonstrating how offline authentication failures can be exploited to bypass PIN verification for high-value Mastercard payments using an Android app.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

Black Hat

Using Static Binary Analysis to Find Vulnerabilities and Backdoors in Firmware

Explore techniques for detecting vulnerabilities and backdoors in embedded device firmware using static binary analysis, focusing on challenges and automated solutions for complex binary blobs.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

John Hammond

Stealing Passwords Every Time They Change

Discover password theft techniques and defense strategies through practical cybersecurity demonstrations and real-world attack scenarios.

• YouTube
• 18 minutes
• On-Demand
• Free Video

John Hammond

Hacking Endpoint to Identity - Microsoft 365 ConsentFix

Discover how to exploit Microsoft 365 identity vulnerabilities using the ConsentFix technique to escalate from endpoint access to full identity compromise.

• YouTube
• 20 minutes
• On-Demand
• Free Video

media.ccc.de

When Vibe Scammers Met Vibe Hackers - Pwning PhaaS with Their Own Weapons

Explore how AI-powered fraud hunters dismantled Taiwan's fake delivery scam networks by exploiting the same AI-generated vulnerabilities criminals used to build their platforms.

• YouTube
• 35 minutes
• On-Demand
• Free Video

NahamSec

Hunting for Amazon Cognito Security Misconfigurations

Explore Amazon Cognito security misconfigurations, including unauthorized access, authentication bypass, and privilege escalation. Learn detection techniques and developer recommendations.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Black Hat

Practical HTTP Header Smuggling - Sneaking Past Reverse Proxies to Attack AWS and Beyond

Explore HTTP header smuggling techniques to bypass security measures, attack web applications, and exploit vulnerabilities in proxy servers and AWS services.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Attacking ADFS Endpoints with PowerShell

Explore ADFS endpoint vulnerabilities and attack techniques using PowerShell, focusing on authentication bypass, federation info retrieval, and user enumeration in Office 365 environments.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk