Gender Based Violence Courses

nullcon

A Broken Commercial Metaverse-Based Virtual Office Platform

Exposé des vulnérabilités critiques dans les plateformes de bureau virtuel du métavers, avec démonstrations d'attaques et recommandations de sécurité pour les développeurs et utilisateurs.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

nullcon

Andromeda - GUI Based Dynamic Instrumentation Toolkit Powered by Frida

Explore Andromeda, a GUI-based toolkit for dynamic app analysis. Learn about class enumeration, method hooking, and runtime memory analysis features that enhance mobile security research and penetration testing.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

nullcon

Nearly Generic Fuzzing of XML Based Formats

Explore advanced XML fuzzing techniques and a new tool for mutating XML documents, with insights from an experienced penetration tester on finding security vulnerabilities in various formats.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Recon Conference

Reverse Engineering Satellite Based IP Content Distribution

Reverse engineering satellite IP content delivery: from reception to packet analysis, error correction, and high bitrate handling. Culminates in creating a Linux-based client mimicking commercial versions.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Recon Conference

Static Instrumentation Based on Executable File Formats

Static instrumentation techniques for executable files without modifying code or system environment. Enables architecture-independent injection and hooking without privileged access, suitable for integrity checking and non-rooted environments.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Recon Conference

Taint-Based Return Oriented Programming

Explore an intermediate approach to return oriented programming using taint-based analysis, balancing speed and query expressiveness for efficient gadget discovery and chaining.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Recon Conference

Baring the System - New Vulnerabilities in SMM of Coreboot and UEFI Based Systems

Unveiling new vulnerabilities in SMM of Coreboot and UEFI systems, exploring impacts, and discussing mitigation techniques. Includes release of CHIPSEC module for automatic detection.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Conference Talk

Recon Conference

The Next Generation of Virtualization Based Obfuscators

Explore next-gen virtualization obfuscators: design principles, weaknesses, and future challenges. Learn about advanced code protection techniques and their impact on modern software security.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

TED

Why Violence Clusters in Cities - and How to Reduce It

Explore urban violence patterns, their impact, and effective strategies for creating safer communities through evidence-based approaches and community engagement.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Code Intention Hiding Based on AI Uninterpretability

Explore AI-based framework for concealing attack intentions and protecting codes. Learn about Deep Puzzling, its core ideas, key points in data collection, feature extraction, and binary code generation modeling.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Bypassing Hardware-Based Trusted Boot Through x86 Downgrade

Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Tracking Fake News Based on Deep Learning

Innovative deep learning model for tracking fake news authors by analyzing content and stylistic features, enabling identification of attackers spreading malicious rumors for financial gain.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Kaspersky

The State Monitoring Engine Based on Kaspersky Security System for the Adaptive MILS Platform

Explore Kaspersky's State Monitoring Engine for adaptive MILS platforms, covering project overview, demonstrations, architecture, and security system implementation for industrial cybersecurity.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

Smishmash - Text Based 2FA Spoofing Using OSINT, Phishing Techniques and a Burner Phone

Explore techniques for circumventing text-based 2FA using OSINT, phishing, and burner phones. Learn to connect leaked credentials with likely 2FA phone numbers from public sources.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Black Hat

Alcatraz - A Practical Hypervisor Sandbox to Prevent Escapes from the KVM - QEMU and KVM-Based MicroVMs

Explore a hypervisor sandbox solution for preventing escapes from KVM/QEMU and KVM-based MicroVMs, enhancing security in cloud environments and containerized architectures.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk