Vulnerability Assessment Courses and Certifications

NahamSec

Live Recon on Snapchat - Demonstration of Amass, FFUF, and SecurityTrails

Explore live reconnaissance techniques on Snapchat using tools like amass, FFUF, and SecurityTrails in this hands-on demonstration with @ITSecurityGuard.

• YouTube
• 1 hour 42 minutes
• On-Demand
• Free Video

NahamSec

You've Got Pwned - Exploiting E-Mail Systems

Explore email system vulnerabilities and exploitation techniques in this informative talk by @securinti, covering key security risks and potential attack vectors.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NahamSec

How to Become a HackerOne Millionaire or MVH

Expert hackers share insights on achieving success and recognition in bug bounty programs, including strategies for becoming a top earner or Most Valuable Hacker on HackerOne.

• YouTube
• 1 hour 1 minute
• On-Demand
• Free Video

NahamSec

Introduction to Web Hacking - OWASP Juice Shop

Comprehensive introduction to web hacking using OWASP Juice Shop, covering essential techniques and vulnerabilities for aspiring ethical hackers and security enthusiasts.

• YouTube
• 2 hours 49 minutes
• On-Demand
• Free Video

NahamSec

Recon Methodology for Consistent High-Value Bug Bounties - Interview with Th3G3nt3lman

Discover effective recon methodologies for high-value bug bounties. Learn from @Th3G3nt3lman's experience in GitHub reconnaissance, tool usage, and collaboration strategies for successful hacking.

• YouTube
• 2 hours 19 minutes
• On-Demand
• Free Video

NahamSec

Live Bug Bounty Recon Session on Yahoo - Using Meg, Assetfinder, and Other Tools

Live bug bounty recon session demonstrating tools and techniques for reconnaissance on Yahoo, featuring guest @Tomnomnom. Covers creating wordlists, using meg and assetfinder, directory brute forcing, and crt.sh.

• YouTube
• 1 hour 47 minutes
• On-Demand
• Free Video

NahamSec

Live Bug Bounty Recon Session on Yahoo - Amass, crt.sh, and Dirsearch

Live bug bounty recon session demonstrating advanced techniques for discovering vulnerabilities on Yahoo, featuring tools like Amass, crt.sh, and dirsearch, with guest expert @TheDawgyg.

• YouTube
• 3 hours 10 minutes
• On-Demand
• Free Video

Bugcrowd

Turbo Intruder: Abusing HTTP Misfeatures to Accelerate Web Application Attacks

Explore advanced HTTP exploitation techniques using Turbo Intruder, a high-speed Burp extension for automated web application attacks, with insights on payload generation and response analysis.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Bugcrowd

How to Shot Web: Successful Tactics and Tools for Bug Hunting

Explore successful tactics, tools, and methodologies used by top bug hunters to improve your web and mobile app hacking skills for claiming bug bounties.

• YouTube
• 1 hour 18 minutes
• On-Demand
• Free Video

HackerOne

The Bug Hunter's Methodology v4 - Recon Edition

Explore cutting-edge techniques for bug hunters and red teamers to discover and expand attack surfaces, focusing on domain reconnaissance, subdomain enumeration, and IP space analysis.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Conference Talk

HackerOne

Pentesting vs Bug Bounty - Approaches and Methodologies

Explore the differences between bug bounty hunting and penetration testing methodologies, comparing approaches, impacts, and scoping techniques.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Cyber Mentor

A Day in the Life of an Ethical Hacker - 2022 Edition

Experience a day as an ethical hacker: explore cybersecurity tasks, tools, and techniques used to identify vulnerabilities and strengthen digital defenses in this insightful video.

• YouTube
• 23 minutes
• On-Demand
• Free Video

HackerSploit

How to Write a Penetration Testing Report

Learn to create effective penetration testing reports: key components, best practices, and industry standards for clear communication of security findings and recommendations to stakeholders.

• YouTube
• 37 minutes
• On-Demand
• Free Video

HackerSploit

Bypassing UAC with UACMe - HEK.SI 2022 Conference Presentation

Comprehensive guide to bypassing User Account Control on Windows 10 for privilege escalation, presented at HEK.SI 2022. Covers techniques using UACMe tool to elevate privileges and enhance system access.

• YouTube
• 35 minutes
• On-Demand
• Free Video

HackerSploit

Log4J Vulnerability (Log4Shell) - Exploitation and Mitigation

Exploración detallada de la vulnerabilidad Log4Shell en Log4J, demostrando técnicas de explotación y mitigación en Apache Solr. Incluye explicación del impacto y gravedad de esta falla crítica de seguridad.

• YouTube
• 46 minutes
• On-Demand
• Free Video