Browser Exploitation Courses and Certifications

White Hat Cal Poly

Browser Exploitation - Max Zinkus

Explore JavaScript-based browser exploitation techniques, including XSS, JIT compilation vulnerabilities, and shellcode execution. Learn about browser security measures and how to find and chain exploits.

• YouTube
• 45 minutes
• On-Demand
• Free Video

DefCamp

Click to Hack - Fuzzing and Exploiting Browser via Mouse Clicks

Discover innovative browser security testing techniques through mouse click-based fuzzing and exploitation methods, exploring vulnerabilities and defensive strategies in modern web browsers.

• YouTube
• 51 minutes
• On-Demand
• Free Video

Bugcrowd

Browser Exploitation for Fun and Profit - Dhiraj Mishra, Bugcrowd's LevelUp 2017

Explore browser vulnerabilities, their root causes, and exploitation techniques. Learn about interesting security flaws discovered during research and gain insights into browser exploitation.

• YouTube
• 27 minutes
• On-Demand
• Free Video

NDC Conferences

Chrome Browser Exploitation: From Zero to Heap Sandbox Escape

Dive into Chrome browser exploitation techniques, focusing on V8 JavaScript engine vulnerabilities and methods to bypass heap sandbox security implementations.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Black Hat

Fire & Ice - Making and Breaking macOS Firewalls

Explore macOS firewall creation and vulnerabilities, covering kernel-level socket filtering, user-mode communication, secure installation, and self-defense mechanisms. Learn about firewall bypasses and potential weaknesses.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

John Hammond

Hacking Twitch Chat - Cybersecurity Tutorial

Explore vulnerabilities in Twitch chat systems and learn ethical hacking techniques to identify security flaws in live streaming platforms.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Exploiting Browsers Like A Boss

Learn advanced browser exploitation techniques and strategies for identifying vulnerabilities in web applications from cybersecurity expert Bryce Kunz.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

Hell on Earth - From Browser to System Compromise

Explore cutting-edge browser exploitation techniques and kernel vulnerabilities from Pwn2Own 2016. Analyze attack vectors, root causes, and remediation strategies for achieving system-level access.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Black Hat

SVG - Exploiting Browsers without Image Parsing Bugs

Explore SVG's hidden potential for web exploitation, including JavaScript execution and external resource imports, challenging traditional browser security assumptions.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Black Hat

This is for the Pwners - Exploiting a WebKit 0-day in PlayStation 4

Explore WebKit exploitation techniques for PlayStation 4, focusing on browser vulnerabilities as entry points for full-chain attacks. Learn about hardening challenges and cutting-edge exploit development.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Innovative Approaches to Exploit Delivery

Innovative techniques for delivering exploits, combining research in exploit writing, browser and PDF exploitation, web hacking, and data representation. Includes demos of creative methods like "Javascript chameleons" and "exploitation by painting".

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Million Browser Botnet - Creating a JavaScript-Driven Browser Botnet for DDoS Attacks

Explore how online advertising networks can be exploited to create massive browser botnets for various malicious activities, including DDoS attacks and password cracking, without leaving traces.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Security BSides San Francisco

Offensive Javascript Techniques for Red Teamers

Explore advanced JavaScript techniques for red team operations, including browser exploitation, network reconnaissance, and crafting payloads to target internal vulnerabilities quickly and effectively.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Dark Fairytales from a Phisherman Vol II

Explore advanced phishing techniques, leveraging tools like Phishing Frenzy and BeEF for effective campaigns. Learn from real-world statistics and engaging hacking stories to enhance your cybersecurity skills.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Browser Hacking With ANGLE

Explore browser hacking using ANGLE, covering WebGL basics, vulnerability analysis, and RCE exploitation in macOS. Learn about ANGLE architecture and specific CVEs in Chrome and Safari.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk