Vulnerability Analysis Courses and Certifications

Bill Buchanan OBE

Vulnerability Analysis and Penetration Testing Lab - DMZ Setup and Scanning

Hands-on lab exploring vulnerability analysis and penetration testing techniques, covering network scanning, fingerprinting, and security tool usage for identifying system weaknesses.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

BSidesMunich

Practical Vulnerability Analysis for Development Teams

Discover effective vulnerability analysis techniques and best practices for development teams, focusing on identifying and mitigating security risks in software development.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

DEFCONConference

CARVER Vulnerability Analysis and US Voting System

Explore CARVER vulnerability analysis framework applied to US voting systems, examining security strengths and weaknesses through WWII-era intelligence methodology.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Learn to exploit and mitigate the critical Spring4Shell vulnerability. Gain hands-on experience in a secure lab environment, understand its significance, and communicate effectively with stakeholders.

• Cybrary
• Self-Paced
• Paid Course

Getting Started with Security Command Center Enterprise

Comprehensive overview of Google Cloud Security Command Center Enterprise, covering threat detection, vulnerability management, and case management for multi-cloud environments.

• Google Skills
• 4 hours
• Self-Paced
• Paid Course

Bugcrowd

Log4Shell Vulnerability - Bugcrowd Security Flash

Explore the critical Log4Shell vulnerability, its impact, and mitigation strategies in this concise security briefing from Bugcrowd's expert.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

OWASP Foundation

How to Find the Next Great Deserialization CVE - AppSecUSA 2016

Explore deserialization attacks, learn to find and exploit vulnerabilities, and discover open-source protection methods. Gain insights into the challenges of traditional AppSec defenses against these threats.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

DEFCONConference

Security Vulnerabilities in Video Surveillance Systems and Supply Chain Analysis

Explore security vulnerabilities in surveillance systems, focusing on NVR devices from major vendors like Hikvision and Dahua, while examining supply chain risks and exploitation scenarios.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

CryptoCat

Directory Traversal and Remote Code Execution in Binwalk - CVE-2022-4510 Analysis

Explore the critical CVE-2022-4510 vulnerability in binwalk, understanding its path traversal weakness, exploitation methods, and practical applications in CTF challenges.

• YouTube
• 13 minutes
• Self-Paced
• Free Video

media.ccc.de

DNGerousLINK - A Deep Dive into WhatsApp 0-Click Exploits on iOS and Samsung Devices

Dive into the technical analysis of sophisticated WhatsApp 0-click exploits targeting iOS and Samsung devices, exploring CVE vulnerabilities and attack chain reconstruction.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

IEEE

Security of GPS - INS Based On-Road Location Tracking Systems

1 rating

Explores vulnerabilities in GPS/INS location tracking for road transport, demonstrating how adversaries can spoof routes to reach alternate destinations undetected. Proposes countermeasures to enhance system security.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

IEEE

Complex Paths and Derelict Sentinels - Software Engineering Underpinnings of NTP Vulnerabilities

Explore software engineering choices behind recent NTP vulnerabilities, focusing on packet consistency checks, ephemeral associations, and spoofing in this IEEE conference talk.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

OWASP Foundation

Discovering Shadow Vulnerabilities in Popular Open-Source Projects - A Journey Through Reverse-Fuzzing

Explore hidden vulnerabilities in open-source libraries, their impact on high-profile projects, and the challenges of detection and mitigation. Learn about "Shadow Vulnerabilities" and their implications for software security.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

NDC Conferences

Finding a Three 0-Day Exploit Chain in Ivanti EPMM and Ivanti Sentry

Detailed analysis of three critical 0-day vulnerabilities discovered in Ivanti EPMM and Sentry, including authentication bypasses and arbitrary file write. Explores the exploit chain and its real-world impact.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Black Hat

Attacking NPUs of Multiple Platforms

Explore vulnerabilities in NPU systems across Samsung, Qualcomm, and Apple chipsets. Learn code auditing, firmware reversing, and exploitation techniques for NPU security research.

• YouTube
• 37 minutes
• Self-Paced
• Free Video