Vulnerability Analysis Courses and Certifications

Black Hat

Routopsy - Modern Routing Protocol Vulnerability Analysis and Exploitation

Explore vulnerabilities in dynamic routing and redundancy protocols, learn about common misconfigurations, and discover techniques for network attacks and discovery in this comprehensive analysis.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

DEFCONConference

Hacking PBX and UC Systems: Attack Surface Analysis and Vulnerability Discovery

Dive into enterprise PBX/UC system vulnerabilities, exploring attack surfaces, Java Runtime exploitation, PHP decryption, and shell access techniques in communication infrastructure.

• YouTube
• 37 minutes
• On-Demand
• Free Video

DEFCONConference

Polynonce: A Novel ECDSA Attack and Vulnerability Analysis

Explore a novel ECDSA digital signature vulnerability through real-world examples in Bitcoin and Ethereum networks, including attack implementation and security implications.

• YouTube
• 20 minutes
• On-Demand
• Free Video

DEFCONConference

Application Security Considerations in the Casino Industry - Ransomware and Vulnerability Analysis

Explore casino industry cybersecurity challenges through real-world ransomware attacks, focusing on application vulnerabilities, system compromises, and defensive strategies in gaming operations.

• YouTube
• 18 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Android MRI Interpreter: Taking Pictures of App Code for Vulnerability Analysis

Explore Android app vulnerability detection through a novel OS with MRI-like functionality, enabling non-invasive code analysis and data flow tracing for enhanced mobile security.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Black Hat

OTRazor - Static Code Analysis for Vulnerability Discovery in Industrial Automation Scripts

Explore industrial robot programming security, focusing on vulnerabilities in automation scripts. Learn about a static code analyzer for detecting unsafe patterns and discuss mitigation strategies.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

LASCON

Improving Dynamic Vulnerability Scanners with Static Code Analysis

Combining static code analysis and dynamic scanning to enhance vulnerability detection in web applications, improving security by identifying hidden endpoints and reducing false positives.

• YouTube
• 37 minutes
• On-Demand
• Free Video

IEEE

HackEd: A Pedagogical Analysis of Online Vulnerability Discovery Exercises

Analyze online vulnerability discovery exercises, exploring methodology, results, feedback, metacognition, and learning environments for effective cybersecurity education.

• YouTube
• 15 minutes
• On-Demand
• Free Video

IEEE

MitM Attack by Name Collision - Cause Analysis and Vulnerability Assessment in the New gTLD Era

Explore MitM attacks via name collision, analyzing causes and vulnerabilities in the new gTLD era. Learn about WPAD query leakage, attack surface characterization, and potential remediation strategies.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

ACM SIGPLAN

Efficient Static Vulnerability Analysis for JavaScript with Multiversion Dependency Graphs

Explore a novel approach to JavaScript vulnerability detection using Multiversion Dependency Graphs, improving analysis efficiency and accuracy for npm packages.

• YouTube
• 20 minutes
• On-Demand
• Free Video

OWASP Foundation

From SBOMs to F-Bombs: Vulnerability Analysis, SCA Tools, and False Positives and Negatives

Explore vulnerability management in third-party software through a FOSS security library provider's perspective. Learn about SCA tools, SBOMs, and strategies to improve the process for AppSec engineers and developers.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Objective-See Foundation

Patch Different on Operating Systems - Binary Diffing and Vulnerability Analysis

Master binary diffing techniques for *OS platforms, focusing on extracting and analyzing IPSW files, comparing binaries, and understanding security patches using open-source tools like ipsw and Ghidra.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Security BSides London

SMB Reflection Attacks and MS08-068 Vulnerability Analysis - Security Deep Dive

Explore SMB reflection attacks and MS08-068 vulnerability through hands-on demonstrations, uncovering hidden security risks and practical mitigation strategies for modern networks.

• YouTube
• 10 minutes
• On-Demand
• Free Video

Analysis of and Lessons from the Xz-Utils Vulnerability - What Might Come Next

Delve into the technical analysis of the xz-utils vulnerability incident, exploring the combined attack techniques, social engineering aspects, and future implications for open-source software security.

• YouTube
• 40 minutes
• On-Demand
• Free Video

USENIX

FIRE: Combining Multi-Stage Filtering with Taint Analysis for Scalable Recurring Vulnerability Detection

Discover how FIRE combines multi-stage filtering and taint analysis to efficiently detect recurring vulnerabilities in open-source software, achieving 90% precision and superior performance over existing tools.

• YouTube
• 12 minutes
• On-Demand
• Free Video