NahamCon Talks & Presentations

NahamSec

The Bug Hunter's Methodology v4.0 - Recon Edition

Comprehensive guide to reconnaissance techniques for bug bounty hunters, covering advanced methods to identify vulnerabilities and expand attack surfaces in web applications.

• YouTube
• 1 hour 40 minutes
• On-Demand
• Conference Talk

NahamSec

The Bug Hunter's Methodology - Application Analysis v1

Comprehensive guide to application analysis for bug hunters, covering advanced techniques, tools, and methodologies to identify vulnerabilities and maximize bounty rewards.

• YouTube
• 1 hour 27 minutes
• On-Demand
• Conference Talk

NahamSec

Putting Your Mind to It - Bug Bounties for 12 Months

Insights into successful bug bounty hunting strategies and experiences over a 12-month period, focusing on mindset, persistence, and effective techniques for finding vulnerabilities.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

NahamSec

Hacking IIS

Explore advanced IIS hacking techniques, including HTTPAPI 2.0 assets, VHost hopping, local file disclosure, and complex XXE vectors. Learn to leverage tools like DNSpy for effective web application security testing.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

NahamSec

Who, What, Where, When, Wordlist

Explore techniques for creating and utilizing effective wordlists in cybersecurity, including target-specific lists, data processing, and practical applications for bug hunting.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

NahamSec

Owning Online Games with Only Web Hacking Experience

Explore web hacking techniques to exploit online games, leveraging existing web security knowledge for game vulnerabilities. Gain insights into adapting skills for game security testing.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

NahamSec

How to Use Amass Efficiently

Comprehensive guide on maximizing Amass tool for efficient information gathering and reconnaissance in cybersecurity, presented by expert Jeff Foley at NahamCon2020.

• YouTube
• 1 hour 56 minutes
• On-Demand
• Conference Talk

NahamSec

You've Got Pwned - Exploiting E-Mail Systems

Explore email system vulnerabilities and exploitation techniques in this informative talk by @securinti, covering key security risks and potential attack vectors.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NahamSec

The Power of Shodan - Leveraging Shodan for Critical Vulnerabilities

Explore Shodan's capabilities for identifying critical vulnerabilities in systems. Learn effective techniques to leverage this powerful search engine for enhanced cybersecurity and vulnerability assessment.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

NahamSec

How to Properly Own APIs for Your First Valid Submission

Learn effective techniques for exploiting APIs to secure your first valid bug bounty submission, focusing on practical strategies and insider tips for successful API hacking.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

NahamSec

Reversing Web Assembly

Explore techniques for reversing Web Assembly (wasm) in this offensive security talk. Learn key strategies and tools for analyzing and understanding wasm code.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

NahamSec

Blackbox Monitoring for Timely Bug Detection

Discover effective blackbox monitoring techniques for timely bug detection in web applications. Learn task-based hybrid approaches, freshness indicators, and risk markers for improved security.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

NahamSec

Continuous Intrusion - Hacking CI Systems

Explore techniques for exploiting vulnerabilities in Continuous Integration systems, focusing on security risks and potential attack vectors in the software development pipeline.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NahamSec

Breaking Into Cloud Wallets - Hacking Crypto Web Apps

Explore cloud wallet vulnerabilities and crypto web app hacking techniques in this talk by @samwcyo, covering blind XSS, SQL injection, and account takeovers in the cryptocurrency ecosystem.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NahamSec

Effectively Finding Vulnerabilities by Debugging the Source Code

Discover effective techniques for identifying vulnerabilities through source code debugging. Learn to enhance your bug hunting skills and improve your ability to find security flaws in software.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk