Conference Talks

Docker

Developing with Docker Containers

Use Docker containers to build development environments that mirror testing and production while managing dependencies, caching, logs, and debugging.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Docker

Deeper Dive in Docker Overlay Networks

Explore Docker overlay networking by building a simple overlay with namespaces and VXLAN, then distributing container IP and MAC information through BGP-EVPN.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Docker

Docker Security Deep Dive

Learn to secure Docker containers through image supply-chain controls, vulnerability remediation, certificate rotation, and Windows container security.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Attack Scenarios Abusing Azure Active Directory

Explores privilege escalation and attack scenarios in Azure Active Directory, from role and application abuse to control of Azure, Office 365, and tenants.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Security Technology Arms Race 2021 - Medal Event

A keynote examines how modern isolation, mitigations, detection, and evolving attack techniques are reshaping the cybersecurity arms race.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

WoW Hell - Rebuilding Heaven's Gate

Deep reverse engineering of WoW64’s 32-bit-to-64-bit translation layer, including techniques for bypassing user-space EDR hooks and rebuilding its translation engine.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Payload Delivery for Initial Access in Red Team Engagement

Explores payload delivery techniques for gaining initial access in red team engagements, including attack-surface constraints, TTP bypasses, MagicShell customization, and browser exploits.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Reimplementing Local RPC in .Net

Reimplementing local Windows RPC in .NET by reverse engineering ALPC, parsing NDR formats, and integrating PowerShell for privilege-escalation research.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Overcoming Fear - Reversing With Radare2

Learn practical reverse engineering with radare2 through hands-on demos of commands, visual navigation, configuration, emulation, scripting, and debugging.

• YouTube
• 2 hours 5 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Finding Vulnerabilities in iOS - MacOS Networking Code

Explore how Semmle QL variant analysis uncovered XNU networking bugs and how C proof-of-concept exploits triggered remote kernel crashes.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Hacking LTE Public Warning Systems

Explore how unencrypted, unsigned LTE public warning messages can be forged with an SDR and modified srsLTE code, affecting Apple and Android test phones.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

NTLM Relay Is Dead, Long Live NTLM Relay

Examines how NTLM relay and reflection attacks exploit Windows authentication across SMB, browsers, HTTP, and Exchange, and how defenders can mitigate them.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

File Structures - Another Binary Exploitation Technique

Explores File Stream Oriented Programming: abusing GNU C Library FILE structures to bypass Linux protections and achieve remote code execution.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Hacking a Hospital for Fun and Profit

A penetration-testing case study of hospital networks and connected medical devices, from attack-surface mapping to vulnerabilities in imaging, monitoring, and surgical systems.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

In Depth Analysis of Multicast DNS and DNS Service Discovery

An in-depth threat analysis of multicast DNS and DNS Service Discovery, covering spoofing, reconnaissance, cache poisoning, denial-of-service attacks, and mitigations.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk