H@cktivitycon Talks & Presentations

HackerOne

H@cktivityCon 2020 - From an 'IVI in a Box' to a 'Car in a Box'

Explore car hacking techniques, from 'IVI in a box' to 'CAR in a box', with insights on safely experimenting without damaging your own vehicle. Learn from real-world experiences and practical tips.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

HackerOne

The Bug Hunter's Methodology - Application Analysis

Discover advanced techniques for application analysis in bug hunting with insights from a top-ranked researcher. Learn recon strategies and web app vulnerabilities to enhance your ethical hacking skills.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

HackerOne

The Bug Hunter's Methodology v4 - Recon Edition

Explore cutting-edge techniques for bug hunters and red teamers to discover and expand attack surfaces, focusing on domain reconnaissance, subdomain enumeration, and IP space analysis.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Conference Talk

HackerOne

WAF Bypass In Depth

Explore advanced techniques for bypassing Web Application Firewalls (WAFs) and demonstrating the impact of cross-site scripting vulnerabilities, even in the presence of sophisticated security measures.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

HackerOne

Leveraging Bug Bounties for Your Career

Discover how bug bounty hunting can boost your cybersecurity career. Expert hackers share insights on skill development, networking, and leveraging experiences for future opportunities.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

HackerOne

Breaking VNC Clients with Evil Servers

Explore VNC client vulnerabilities and learn how malicious servers can exploit them. Gain insights from an award-winning hacker on application security and sustainable DevSecOps practices.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

HackerOne

Vulnerabilities I've Found - The Fun, the Weird and the Technical

Explore unique vulnerabilities discovered by hacker Roni Carta, inspired by Arsene Lupin. Learn creative exploitation techniques and gain insights into the world of ethical hacking.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

HackerOne

Submitting High Quality Bug Bounty Reports - Tips from Behind the Curtain

Learn insider tips for crafting high-quality bug bounty reports from Roy Davis, an experienced security researcher and manager of Zoom's Bug Bounty program. Gain valuable insights to improve your submissions.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

HackerOne

Introducing Networking and Security through TikTok

Explore how TikTok's algorithm and user base are leveraged to introduce networking and security concepts to a wider audience through engaging short-form content.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

HackerOne

All Your -Data-base Are Belong To Us

Explore vulnerability research in office applications through fuzzing, code review, and reverse-engineering. Learn to discover and exploit zero-days, with insights on binary exploitation for curious researchers.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

HackerOne

TruffleHog Chrome Extension - Open CORS in SAAS API's Lead to Leaky Keys

Discover API keys hidden in web pages with the open-source TruffleHog Chrome extension. Learn how to use this tool and explore real-world examples of exposed keys in SaaS APIs with open CORS.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

HackerOne

Hacking on Bug Bounties for Five Years

Discover the evolution of bug bounty hunting over five years, exploring successful techniques, favorite vulnerabilities, and lessons learned to help you replicate success in ethical hacking.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

HackerOne

Breaking Down Offsec Certifications

Explore the value of infosec certifications with industry experts, discussing preparation strategies, career impact, and essential skills for success in the cybersecurity field.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

HackerOne

Launching an InfoSec Career

Explore diverse paths to cybersecurity careers, from CTFs to bug bounties. Learn key strategies for success, including self-teaching, building a unique skill set, and leveraging your online presence as a resume.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

HackerOne

Discover Vulnerabilities with CodeQL

Explore CodeQL's static and taint analysis capabilities to uncover vulnerabilities, including potential RCE flaws. Learn key concepts for effective code analysis and security testing.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk