Code Injection Courses and Certifications

Complete Web Application Offensive Hacking Course:Pro Hacker

38 ratings at Udemy

An Excellent Practical Course to Ethical Web Hacking. Become a successful Pen tester, Bug bounty Hunter and Pro Hacker.

• Udemy
• 7 hours 45 minutes
• On-Demand
• Paid Course

Black Hat

TrustKit - Code Injection on iOS 8 for the Greater Good

Explore iOS 8's new code packaging rules and their impact on security. Learn about TrustKit, an open-source library for easy SSL public key pinning implementation in iOS apps without source code modification.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Popular Approaches to Preventing Code Injection Attacks are Dangerously Wrong

Explores limitations of current code injection prevention methods and introduces Name Space Layout Randomization (NSLR) as a novel approach to secure Java applications against known and zero-day vulnerabilities.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Injection on Steroids - Code Less Code Injections and 0 Day Techniques

Explore advanced code injection techniques, from classic methods to innovative approaches like PowerLoader and kernel-to-user injections. Learn about shared sections, ROP, and codeless injections.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

CppCon

Refactoring C++ Code for Unit Testing with Dependency Injection

Master dependency injection techniques in C++ for better unit testing, exploring various implementation approaches and practical strategies for both new and legacy codebases.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Free Video

nullcon

Arbitrary Code Execution on RISC-V Using Fault Injection

Explore fault injection techniques for arbitrary code execution on RISC-V, focusing on control flow corruption and new fault models. Learn practical implications for embedded device security.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Black Hat

Jack-in-the-Cache - A New Code Injection Technique through Modifying X86-to-ARM Translation Cache

Explores a novel code injection technique for Windows 10 on ARM, exploiting vulnerabilities in x86-to-ARM translation cache to compromise system security on ARM-based laptops.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

BSidesLV

Injection on Steroids - Code-less Code Injections and 0-Day Techniques

Explore advanced code injection techniques and zero-day vulnerabilities without writing code. Learn cutting-edge cybersecurity strategies for identifying and exploiting system weaknesses.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

LASCON

Riding the Magical Code Injection Rainbow

Explore advanced exploitation techniques for SQL injection, XPath injection, cross-site scripting, and shell command injection using the Magical Code Injection Rainbow framework for configurable vulnerable applications.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

BSidesLV

Repo Jacking - How GitHub Exposes Over 70,000 Projects to Remote Code Injection

Explore how GitHub's vulnerability exposes thousands of projects to remote code injection, uncovering potential security risks and implications for developers and organizations.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

IEEE

SEVerity - Code Injection Attacks against Encrypted Virtual Machines

Explore code injection attacks on encrypted VMs, focusing on SEVerity technique. Learn about vulnerabilities, remapping strategies, and SMP implications for enhanced cybersecurity understanding.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Security BSides London

Introduction to Fault Injection for Exploiting Bug-Free Code in Embedded Systems

Discover fault-injection attack techniques for embedded systems, from voltage manipulation to electromagnetic interference. Learn practical tools, mitigation strategies, and real-world applications including the Raspberry Pi Pico 2 security features.

• YouTube
• 44 minutes
• On-Demand
• Free Video

USENIX

Yes, One-Bit-Flip Matters! Universal DNN Model Inference Depletion with Runtime Code Fault Injection

Explore FrameFlip, a groundbreaking attack method that depletes DNN model inference through single-bit fault injections, demonstrating universal effectiveness across major machine learning frameworks.

• YouTube
• 12 minutes
• On-Demand
• Free Video

NDC Conferences

Three Unlikely Successful Features of D

Explore three unconventional D language features that gained widespread adoption, examining their unexpected utility and impact on programming practices.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Bugcrowd

Bug Bounty Hunting Methodology - Jason Haddix from Bugcrowd's LevelUp

Comprehensive web hacking methodology covering reconnaissance, scanning, and exploitation techniques for bug bounty hunters and security researchers.

• YouTube
• 58 minutes
• On-Demand
• Free Video