Exploit Development Courses and Certifications

Hack In The Box Security Conference

Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities

Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Exploiting the Lexmark PostScript Stack

Explore Lexmark PostScript stack exploitation, covering internals, language basics, mitigations, and achieving remote code execution through out-of-bounds read and type confusion vulnerabilities.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Recon Conference

Remotely Exploiting the ClamAV Antivirus Engine - CVE-2023-20032 Case Study

Explore a case study on exploiting CVE-2023-20032 in ClamAV, demonstrating remote code execution and ASLR bypass techniques applicable to similar antivirus software vulnerabilities.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Bypassing EMET 4.1 - Exploiting Enhanced Mitigation Experience Toolkit

Learn techniques for bypassing Microsoft's Enhanced Mitigation Experience Toolkit (EMET) with expert insights on exploit development and security vulnerabilities.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Cooper

The Path Towards Automated Heap Exploitation

Explore automated heap exploitation techniques and strategies for enhancing cybersecurity defenses in this insightful conference talk by Thaís Moreira Hamasaki.

• YouTube
• 29 minutes
• On-Demand
• Free Video

SyScan360

Xenpwn - Breaking Paravirtualized Devices

Explore techniques for exploiting vulnerabilities in paravirtualized devices, focusing on Xen hypervisor security and potential attack vectors in virtualized environments.

• YouTube
• 55 minutes
• On-Demand
• Free Video

SyScan360

The Birth of a Complete IE11 Exploit Under New Exploit Mitigations

Explore advanced techniques for developing a full IE11 exploit, navigating modern security measures and mitigation strategies.

• YouTube
• 48 minutes
• On-Demand
• Free Video

IEEE

Unleashing Mayhem on Binary Code

Explore automated exploit generation for binary programs using hybrid symbolic execution and index-based memory modeling. Learn techniques to find and demonstrate exploitable vulnerabilities efficiently.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Black Hat

Unveiling the Cracks in Virtualization - VMware Workstation Escape

Explore VMware Workstation vulnerabilities, focusing on USB controller exploits. Learn about information leakage, arbitrary read/write, and bypassing Windows protections in virtualization escapes.

• YouTube
• 37 minutes
• On-Demand
• Free Video

SLUB Internals for Exploit Developers

Explore SLUB allocator internals and slab memory shaping strategies for Linux kernel exploit development. Gain insights into controlling memory corruption and implementing effective exploit techniques.

• YouTube
• 1 hour 31 minutes
• On-Demand
• Free Video

DEFCONConference

Vulnerabilities to End Your Space Mission - Space Security Analysis and Exploits

Uncover critical vulnerabilities in space mission systems that could compromise spacecraft control and mission integrity through real-world exploit demonstrations.

• YouTube
• 18 minutes
• On-Demand
• Free Video

BSides Budapest IT Security Conference

How I Got Into Hacking - Cybersecurity in The Last Millennium

Dive into a nostalgic journey through cybersecurity evolution from the 90s, exploring early hacking culture from game modifications to kernel rootkits, with insights on historic hacking movements and their modern implications.

• YouTube
• 16 minutes
• On-Demand
• Free Video

CryptoCat

Mother Printers - Full Exploit Chain Analysis and Demo

Explore a multi-stage printer exploitation chain through web, reverse engineering, and pwn techniques inspired by real Brother printer CVEs for comprehensive security analysis.

• YouTube
• 58 minutes
• On-Demand
• Free Video

nullcon

DHCPwned - Owning Cameras One Lease at a Time

Discover how to exploit Ubiquiti AI Bullet IP cameras through DHCP vulnerabilities, covering attack surface analysis, RCE exploitation, and reliable proof-of-concept development.

• YouTube
• 27 minutes
• On-Demand
• Free Video

DEFCONConference

Can't Stop the ROP - Automating Universal ASLR Bypasses

Discover nine novel bypasses of Windows high-entropy ASLR using simple ROP gadgets, expanding attack surfaces and enabling previously impossible exploits with automated tools.

• YouTube
• 43 minutes
• On-Demand
• Free Video