Hack In The Box Security Conference Talks & Presentations

Hack In The Box Security Conference

NFC Payments - The Art of Relay and Replay Attacks

Explore NFC payment vulnerabilities, including relay and replay attacks. Learn about hardware, software, and techniques used to exploit NFC transactions and tokenization processes.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Hacking BLE Bicycle Locks for Fun and - A Small - Profit

Explore BLE bicycle lock hacking in ride-sharing economy. Learn to analyze mobile-lock communications, simplify BLE attacks using mobile phones and Frida, and break locks for free rides.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

God Mode Unlocked - Hardware Backdoors in x86 CPUs

Unveiling a critical hardware backdoor in x86 CPUs allowing unprivileged users to bypass security checks and escalate to kernel-level access. Explores detection, prevention, and broader implications for processor security.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Breaking Full Disk Encryption

Breaking Full Disk Encryption: Explore techniques to bypass custom FDE setups remotely, enhancing forensic analysis capabilities for compromised systems with proprietary encryption.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Security is What We Make of It - Blockchain and Beyond

Exploring blockchain's impact on security, data privacy, and enterprise infrastructure. Baldet discusses practical applications, future possibilities, and why information security professionals should engage with this technology now.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Uncovering the Android Patch Gap

Revealing Android security vulnerabilities: analysis of missing patches in vendor firmwares, enabling users to verify patch levels and improve overall protection.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Fuzzing Javascript Engines for Fun and Pwnage

Discover methods for finding vulnerabilities in Javascript Engines through fuzzing techniques, including crash classification, parallel fuzzing, and custom pattern generation for enhanced web browser security.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Real World Attacks Against Secure Elements

Demonstration of real-world attack against globally deployed Secure Element, allowing adversary impersonation of secured devices. Explores vulnerabilities in scaling secure elements for global deployments.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

PyREBox - Making Dynamic Instrumentation Great Again

Explore PyREBox, an open-source reverse engineering tool for QEMU VM inspection, memory modification, and Python-based execution instrumentation. Learn its applications in malware analysis and debugging.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Rootten Apples - Vulnerability Heaven in the iOS Sandbox

Exploring iOS vulnerabilities beyond containerized apps, revealing multiple privilege escalation flaws affecting all devices and demonstrating a chained exploit to bypass security mitigations.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Threat Hunting 101 - Become The Hunter

Discover the world of Threat Hunting: skills, daily tasks, and techniques for proactively identifying advanced persistent threats. Learn from industry experts and real-world case studies.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Everybody Wants SOME - Advance Same Origin Method Execution

Explore advanced Same Origin Method Execution attacks, demonstrating real-world vulnerabilities and new approaches to exploit callback endpoints across major platforms.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

CANsee - An Automobile Intrusion Detection System

Introducing CANsee: A machine learning-based intrusion detection system for automobiles. Detects abnormal CANBUS traffic using a low-cost device to capture and transmit data wirelessly. Open-source project with potential for enhancing vehicle security.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Advanced Exploitation - Xen Hypervisor VM Escape

Explore Xen hypervisor vulnerabilities, internals, and exploitation techniques. Learn about VM escape attacks, security bypasses, and real-world examples for cloud platform security reinforcement.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Inspeckage - Android Package Inspector

Inspeckage: A tool for dynamic analysis of Android apps. Simplifies runtime behavior observation through a web interface, intercepting library calls and allowing interaction with app components.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk