Hack In The Box Security Conference Talks & Presentations

Hack In The Box Security Conference

Hacking a Hospital for Fun and Profit

Revealing security vulnerabilities in hospital networks through penetration testing, exposing risks in medical devices, software, and systems for improved healthcare cybersecurity.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

A Deep Dive Into Malicious Documents

Comprehensive analysis of malicious Office documents, covering macro analysis, obfuscation techniques, shellcode execution, and OS X targeting. Equips attendees to handle various maldoc threats.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

How to Find and Exploit Bugs in IoT Devices - Kelvin Wong

Explore in-depth IoT device security, including hardware hacks, forensic approaches, and exploitation techniques for routers, IP cameras, and smart TVs. Learn practical skills for conducting your own device hacking.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Behaviors and Patterns of Rogue Hosting Providers

Exploration of rogue hosting providers' behaviors, patterns, and impact on cybercrime. Insights into threat intelligence techniques for identifying and combating abusive hosting services, with focus on Dutch infrastructure.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Neuralfuzz - Neural Networks for Fuzzing Web Apps

Explore neural network-based fuzzing for web apps, enhancing coverage and efficiency in identifying vulnerabilities through machine learning and intelligent payload generation.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Get to the Money - Hacking PoS and PoP Systems

Exploración detallada de vulnerabilidades en sistemas de punto de venta, demostrando vectores de ataque y discutiendo la seguridad de sistemas POS modernos, con énfasis en SAP POS.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Hacking Medical Devices and Healthcare Infrastructure

Explore healthcare cybersecurity, focusing on HL7 protocol vulnerabilities in medical devices and hospital systems. Learn to identify and exploit weaknesses in healthcare infrastructure.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

In Depth Analysis of Multicast DNS and DNS Service Discovery

Análisis profundo de los protocolos mDNS y DNS-SD, explorando sus vulnerabilidades inherentes y posibles vectores de ataque en entornos de red de configuración cero.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

A Surprise Encounter With a Telco APT

Exposé of a sophisticated telco hack, revealing methodologies, tools, and protocols used by a suspected state actor. Insights from a live session observation and forensic analysis of a mobile network operator intrusion.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Breaking Apple's iCloud Keychain

Discover techniques for accessing and analyzing data stored in Apple's iCloud, including synced information, backups, and keychain contents. Learn about vulnerabilities in two-factor authentication.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Fault Injection Attacks on Secure Boot

Exploring fault injection attacks on secure boot, this talk introduces techniques, impacts, and practical mitigation strategies for embedded systems security, with real-world examples and key takeaways.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Cache Side Channel Attacks - CPU Design As A Security Problem

Explore CPU cache vulnerabilities and side-channel attacks, their impact on security, and potential mitigations in modern computing environments like cloud and multi-user systems.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Go Speed Tracer - Guided Fuzzing

Explore advanced guided fuzzing techniques for vulnerability discovery, including code coverage analysis, constraint solving, and feedback mechanisms. Learn about novel tools and approaches in dynamic analysis.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Suborner - Windows Bribery for Invisible Persistence

Discover a stealthy Windows persistence technique that creates invisible machine accounts, evades detection, and impersonates existing users. Learn about the Suborner Attack's implementation and effectiveness.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Breaking Web3 - Exploitation Techniques for Cryptocurrency Hacking

Exploration of common vulnerabilities in Web3 projects, covering blockchain topology, node exploitation, DoS attacks, social engineering, and smart contract vulnerabilities in cryptocurrency systems.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk