Responsible Disclosure Courses and Certifications

media.ccc.de

Sicherheitslücken melden: Von der Entdeckung bis zum Responsible Disclosure

Delve into den Prozess der verantwortungsvollen Offenlegung von Sicherheitslücken mit dem CCC, einschließlich praktischer Beispiele und typischer Herausforderungen bei der Meldung von Schwachstellen.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Colin O'Flynn

Ethics and Computer Security

Explores ethical and legal dilemmas in computer security research, including vulnerability disclosure, bug bounties, public safety, and researcher responsibilities.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

media.ccc.de

Maximizing Vulnerability Impact: Security Research as Direct Action

A case study on using security research as direct action, weighing responsible disclosure against public exposure of vulnerabilities.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Automotive Security Research Group

Vulnerability Disclosure 101: How to Safely Report Security Issues

Master effective vulnerability disclosure practices and documentation standards for automotive security researchers, focusing on responsible communication methods and manufacturer collaboration.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

fwd:cloudsec

The File That Contained the Keys Has Been Removed - An Analysis of Secret Leaks in Cloud Buckets and Responsible Disclosure Outcomes

Explore a comprehensive analysis of secret leaks in misconfigured cloud storage buckets, covering 215 exposed credentials and responsible disclosure outcomes across major platforms.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Introduction to Ethical Hacking Principles

110 ratings at Coursera

Distinguish white hat, black hat, and gray hat hacking, work within GDPR, CCPA, and CFAA boundaries, and practice responsible disclosure and security reporting.

• Coursera
• 2 weeks, 3 hours a week
• Self-Paced
• Paid Course

Packt

WordPress Security Testing for Pentesters and Bug Hunters

Learn to pentest WordPress websites using WPScan, Nuclei, fuzzing, and XML-RPC analysis, then document vulnerabilities in effective bug bounty reports through responsible disclosure.

• Coursera
• 8 weeks, 1 hour a week
• Self-Paced
• Paid Course

Packt

Working with CVEs for Ethical Hacking & Bug Bounties

Analyze and hunt CVEs with Burp Suite, Shodan, and Google Dorks; assess vulnerabilities across web platforms and report findings on bug bounty programs.

• Coursera
• 23 weeks, 1 hour a week
• Self-Paced
• Paid Course

RSA Conference

IoT Bug Hunting - From Shells to Responsible Disclosure

Explores techniques for uncovering and exploiting weaknesses in IoT device security controls, from shell access to responsible disclosure.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Design and implement IoT product security programs, from hardware roots of trust and secure boot through manufacturing, vulnerability disclosure, privacy, and regulation.

• Cybrary
• 8-9 hours
• Self-Paced
• Paid Course

GOTO Conferences

Finding, Investigating, Report and Publishing Privacy Issues on Mobile Platforms

A security researcher’s walkthrough of uncovering how mobile apps and in-app browsers can misuse system permissions, then documenting and publicly disclosing the findings.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

DEFCONConference

Unsaflok - Hacking Millions of Hotel Locks and Electronic Access Control Systems

Discover critical vulnerabilities in dormakaba Saflok hotel locks, including key card forgery techniques, security implications, and how to verify if your room's lock has been patched for protection.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

NDC Conferences

I'm Pwned. You're Pwned. We're All Pwned.

Explore modern security challenges, common attacks, and evolving defense strategies in the era of data breaches. Learn practical approaches to protect yourself and your organization online.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Black Hat

Preventing Authentication Bypass - A Tale of Two Researchers

A case study of how researchers uncovered an unsigned JWT flaw in Outlook Web App, impersonated users, and collaborated with Microsoft on remediation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Jens Spahn's Credit Score Is "Very Good"

A case study on using public vulnerability disclosures to maximize the impact of security research as direct action.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk