Gender Based Violence Courses

nullcon

Andromeda - GUI Based Dynamic Instrumentation Toolkit Powered by Frida

Explore Andromeda, a GUI-based toolkit for dynamic app analysis. Learn about class enumeration, method hooking, and runtime memory analysis features that enhance mobile security research and penetration testing.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

nullcon

Nearly Generic Fuzzing of XML Based Formats

Explore advanced XML fuzzing techniques and a new tool for mutating XML documents, with insights from an experienced penetration tester on finding security vulnerabilities in various formats.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Recon Conference

Reverse Engineering Satellite Based IP Content Distribution

Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Recon Conference

Static Instrumentation Based on Executable File Formats

Static instrumentation techniques for executable files without modifying code or system environment. Enables architecture-independent injection and hooking without privileged access, suitable for integrity checking and non-rooted environments.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Recon Conference

Taint-Based Return Oriented Programming

Explore an intermediate approach to return oriented programming using taint-based analysis, balancing speed and query expressiveness for efficient gadget discovery and chaining.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Recon Conference

Baring the System - New Vulnerabilities in SMM of Coreboot and UEFI Based Systems

Unveiling new vulnerabilities in SMM of Coreboot and UEFI systems, exploring impacts, and discussing mitigation techniques. Includes release of CHIPSEC module for automatic detection.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Conference Talk

Recon Conference

The Next Generation of Virtualization Based Obfuscators

Explore next-gen virtualization obfuscators: design principles, weaknesses, and future challenges. Learn about advanced code protection techniques and their impact on modern software security.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

TED

Why Violence Clusters in Cities - and How to Reduce It

Explore urban violence patterns, their impact, and effective strategies for creating safer communities through evidence-based approaches and community engagement.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Black Hat

Smishmash - Text Based 2FA Spoofing Using OSINT, Phishing Techniques and a Burner Phone

Explore techniques for circumventing text-based 2FA using OSINT, phishing, and burner phones. Learn to connect leaked credentials with likely 2FA phone numbers from public sources.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Black Hat

Alcatraz - A Practical Hypervisor Sandbox to Prevent Escapes from the KVM - QEMU and KVM-Based MicroVMs

Explore a hypervisor sandbox solution for preventing escapes from KVM/QEMU and KVM-based MicroVMs, enhancing security in cloud environments and containerized architectures.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Black Hat

Precursor - Towards Evidence-Based Trust in Hardware

Explore evidence-based trust in hardware through the Precursor platform, challenging faith-based approaches and proposing new methods for verifiable hardware security.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

BlueMaster - Bypassing and Fixing Bluetooth-Based Proximity Authentication

Explore security vulnerabilities in Bluetooth proximity authentication, including new attacks on Android Smart Lock and Windows Dynamic Lock, and learn potential fixes for these issues.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

LASCON

Building Trust-Based Networks with Dime Data Format

Explore Dime, a modern data format for building trust networks and enabling secure communication. Learn its advantages over X.509 certificates and its potential for future applications.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

LASCON

Choosing the Right Static Code Analyzers Based on Hard Data

Explore unbiased methods to assess static code analyzers' performance, learn about a new website presenting research results, and discover how to choose the right tools for your development pipeline.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

LASCON

ML-Based Detection Engine for Device and Network Attacks on IIOT Gateways - 2018

Explore ML-based detection for IIOT gateways, focusing on embedded Linux security architecture and instant attack detection from device and network vectors.

• YouTube
• 49 minutes
• Self-Paced
• Free Video