Homeland Security Courses

Hack In The Box Security Conference

API Security Through External Attack Surface Management

Learn how to integrate APIs into External Attack Surface Management to discover exposed assets and improve the security posture of external-facing APIs.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

WIFI Security - From 0 To 1

Step-by-step introduction to WiFi security, covering protocol structure, attack surfaces, WiFi stack auditing, Linux driver vulnerabilities, and protocol fuzzing.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

EXPLIoT Framework - An Introduction to IoT Security Testing

Learn to use the EXPLIoT framework for IoT security testing and write plugins for new exploits and analysis test cases.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Security Framework Challenges & Solutions

Explores physical-layer authentication and parameter extraction from commercial wireless radio modules for securing embedded and mobile devices.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

The State of Mobile Security

A keynote on smartphone attacks, signs of compromise, mobile EDR/DFIR investigations, and accessible mobile-device self-defense.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

MacOS Security - Escaping The Sandbox & Bypassing TCC

Examines macOS sandboxing and TCC permissions, including bypasses enabling sandbox escapes, permission theft, and privilege escalation.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Evolution of Offensive Security

A conference talk tracing the evolution of offensive security.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Red Team vs. Blue Team Exercises for ICS - SCADA Security

Hands-on red-team and blue-team exercises show how to attack industrial control protocols and detect and defend against ICS/SCADA attacks using MITRE ATT&CK for ICS.

• YouTube
• 1 hour 50 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

A Practical Introduction to BLE Security Without Any Special Hardware

Hands-on BLE security assessment using simulated devices on a Windows laptop and phone, with no special hardware required.

• YouTube
• 2 hours 20 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Underrated Security Bugs

Explore underrated security bugs through vulnerable code, exploitation examples, impact assessment, and bug-chain ideas.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

System-Level Threats - Assumptions in Modern Product Security

Examines system-level threats and the assumptions underlying modern product security.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Software Security Era - Past, Present, and Future

A high-level look at how memory-corruption exploitation evolved from classic buffer overflows to modern mitigation bypasses, with demonstrations of buffer and integer overflows.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Security BSides London

Run-Time Tools to Aid Application Security Assessments

Explore run-time tracing tools, including DTrace, for practical application security assessments.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Exposed Secrets - How Public Git Repositories and Docker Images Expose Millions of Secrets Like API Keys and Security Certificates Every Year

Learn how API keys and security certificates become exposed through public Git repositories, Docker images, and packages.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Ooga Booga - Avoiding Reinvention of the Wheel - Useful Security Tools and Lessons to Know

Learn Marie Kondo-style techniques for selecting useful security tools and avoiding reinvention of common solutions on under-resourced security teams.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk