Memory Corruption Courses and Certifications

Format String Vulnerabilities 101 - Lecture 4

Explore format string vulnerabilities, their exploitation, and mitigation strategies in this comprehensive introduction to a critical security concept.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Black Hat

Behind the Scenes of Intel Security and Manageability Engine

Deep dive into Intel's security architecture, exploring firmware environments, feedback fuzzing, and queue management techniques applicable to various systems and fuzzers.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Black Hat

Exploitation of a Modern Smartphone Baseband

Explore smartphone baseband security, learn to find and exploit memory corruption bugs in modern devices. Gain insights into design, countermeasures, and practical hacking techniques.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Black Hat

WebKit Everywhere - Secure or Not?

Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Black Hat

Java Every-Days - Exploiting Software Running on 3 Billion Devices

Explore Java vulnerabilities, exploitation trends, and security measures in this Black Hat talk. Gain insights into common weaknesses, attack surfaces, and Oracle's responses to protect 3 billion devices.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Black Hat

BLEEDINGBIT - Your APs Belong to Us

Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

media.ccc.de

Select Code Execution From Using SQLite

Exploración de vulnerabilidades en SQLite para lograr ejecución de código remoto mediante técnicas innovadoras como Query Hijacking y Query Oriented Programming, demostrando escenarios de ataque en servidores y iOS.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

cpponsea

The C++ Rvalue Lifetime Disaster - Understanding and Mitigating Issues

Explore rvalue reference lifetime issues in C++, their impact on code safety, and potential solutions for improved memory management and generic programming.

• YouTube
• 37 minutes
• On-Demand
• Free Video

OffensiveCon

Blasting Past WebP - Exploring Image Format Vulnerabilities

Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.

• YouTube
• 43 minutes
• On-Demand
• Free Video

OffensiveCon

Attacking Windows Device Drivers: Almost Escaping the Sandbox

Explore techniques for attacking Windows device drivers and potential sandbox escape methods in this advanced security analysis presentation.

• YouTube
• 30 minutes
• On-Demand
• Free Video

OffensiveCon

Beyond Android MTE: Navigating OEM's Logic Labyrinths

Explore advanced Android security, focusing on Memory Tagging Extension (MTE) and OEM-specific implementations. Gain insights into exploiting vulnerabilities in custom logic.

• YouTube
• 49 minutes
• On-Demand
• Free Video

OffensiveCon

Practical Exploitation of Registry Vulnerabilities in the Windows Kernel

Explore practical exploitation techniques for Windows kernel registry vulnerabilities, enhancing your understanding of system security and potential attack vectors.

• YouTube
• 54 minutes
• On-Demand
• Free Video

NDC Conferences

Memory Safety: Rust vs C - A Comparative Analysis

Explore memory safety differences between Rust and C, examining security implications, language features, and practical considerations for choosing between these programming languages.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Free Video

OffensiveCon

Hunting for Overlooked Cookies in Windows 11 KTM and Baking Exploits for Them

Dive into Windows 11 Kernel Transaction Manager vulnerability research, learning how to identify overlooked security issues and develop effective exploits for these "cookie" vulnerabilities.

• YouTube
• 52 minutes
• On-Demand
• Free Video

CryptoCat

Format String Vulnerability Tutorial - Binary Exploitation Challenge

Dive into format string vulnerability exploitation through a CTF challenge walkthrough, covering file analysis, PwnTools scripting, and Ghidra disassembly to capture the flag.

• YouTube
• 19 minutes
• On-Demand
• Free Video