Vulnerability Analysis Courses and Certifications

Black Hat

Insecurity of Mobile Banking

Explore mobile banking app security, revealing privacy risks and vulnerabilities through static and dynamic analysis. Gain insights into global banking app practices and their implications.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Black Hat

The Perl Jam 2 - The Camel Strikes Back

Exploring critical vulnerabilities in Perl's core modules and CGI frameworks, demonstrating fundamental language issues through 0-days, and challenging the "developer's fault" narrative.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

AndroBugs Framework - An Android Application Security Vulnerability Scanner

Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

ThunderStrike 2 - Sith Strike

Explore firmware vulnerabilities in Mac systems, demonstrating software-only attacks and showcasing the potential of Mac firmware malware. Learn about shared vulnerabilities and case studies.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

WebKit Everywhere - Secure or Not?

Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Black Hat

Lessons Learned from Eight Years of Breaking Hypervisors

Explore vulnerabilities in popular hypervisors, examining security features, attack surfaces, and design flaws. Gain insights on improving hypervisor security through real-world examples and expert recommendations.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Black Hat

Exploiting the Jemalloc Memory Allocator - Owning Firefox's Heap

Explore jemalloc memory allocator's architecture, attack vectors, and novel exploitation techniques, focusing on Mozilla Firefox's heap and its security implications.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Black Hat

Dex Education - Practicing Safe Dex

Explore Android's dex file format, analyze vulnerabilities in dex analysis tools, and learn techniques to detect post-compilation modifications and protect against potential exploits.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

PCIe Device Attacks - Beyond DMA - Exploiting PCIe Switches, Messages and Errors

Explore advanced PCIe security threats targeting switches and Translation Layer Packets. Learn about novel attack vectors beyond traditional DMA exploits in high-bandwidth peripheral connections.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Black Hat

Diving Into IE 10’s Enhanced Protected Mode Sandbox

Explore IE 10's Enhanced Protected Mode Sandbox, its security features, and potential vulnerabilities in this in-depth technical analysis.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

PDF Attack - A Journey From the Exploit Kit to the Shellcode Part 1

Explore the intricacies of PDF-based attacks, from exploit kits to shellcode execution, in this comprehensive cybersecurity analysis by Jose Miguel Esparza.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Black Hat

AIS Exposed - Understanding Vulnerabilities and Attacks 2.0

Explore vulnerabilities in Automatic Identification Systems, including malicious routes, hijacking, spoofing, and DoS attacks. Learn about real-world experiments and proposed countermeasures.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

NahamSec

Analyzing a Smart Contract Vulnerability Worth $600,000+ - Smart Contract Series Episode 4

Dive into a critical smart contract vulnerability analysis, exploring a $600,000+ bug in Port Finance and learning how it was identified through a bug bounty program before potential exploitation.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

NahamSec

Attacking Wide Scopes

Explore techniques for attacking wide-scope targets in bug bounty programs. Learn strategies to identify vulnerabilities and maximize your impact when dealing with extensive attack surfaces.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Bugcrowd

Log4Shell - The Worst Java Vulnerability in Years

Explore the critical Log4Shell vulnerability, its impact on Java systems, and essential mitigation strategies in this comprehensive security analysis.

• YouTube
• 28 minutes
• Self-Paced
• Free Video