Security Courses

How to Write a Linux Security Module

Learn to design Linux Security Modules using kernel hooks and security blobs, with filesystem, process, networking, and audit interfaces.

• YouTube
• 1 hour 35 minutes
• Self-Paced
• Conference Talk

Device Security in IoT

Explore IoT device security principles, secure boot, roots of trust, authentication, firmware updates, and platform security architecture through Trusted Firmware-M and PSA.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Linode

Open Source Security Scanner - Docker Image Analysis with Trivy

Learn to use Trivy to scan Docker images for security vulnerabilities through a practical demonstration.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Linode

Securing Apache 2 - HackerSploit Linux Security

Secure an Apache web server by updating it, tightening privilege and directory settings, configuring Apache2.conf, managing .htaccess ownership, and password-protecting directories.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Linode

Linux Monitoring and Logging - HackerSploit Linux Security

Monitor Linux systems by reading authentication logs, tracking logins, and inspecting resource usage with command-line tools.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Hack In The Box Security Conference

Adventures in Security Research

A personal account of 12 years in defensive security, with stories about protecting journalists and at-risk people, gun hacking, and malware analysis.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

API Security Through External Attack Surface Management

Learn how to integrate APIs into External Attack Surface Management to discover exposed assets and improve the security posture of external-facing APIs.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

WIFI Security - From 0 To 1

Step-by-step introduction to WiFi security, covering protocol structure, attack surfaces, WiFi stack auditing, Linux driver vulnerabilities, and protocol fuzzing.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

EXPLIoT Framework - An Introduction to IoT Security Testing

Learn to use the EXPLIoT framework for IoT security testing and write plugins for new exploits and analysis test cases.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Security Framework Challenges & Solutions

Explores physical-layer authentication and parameter extraction from commercial wireless radio modules for securing embedded and mobile devices.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

The State of Mobile Security

A keynote on smartphone attacks, signs of compromise, mobile EDR/DFIR investigations, and accessible mobile-device self-defense.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

MacOS Security - Escaping The Sandbox & Bypassing TCC

Examines macOS sandboxing and TCC permissions, including bypasses enabling sandbox escapes, permission theft, and privilege escalation.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Evolution of Offensive Security

A conference talk tracing the evolution of offensive security.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Red Team vs. Blue Team Exercises for ICS - SCADA Security

Hands-on red-team and blue-team exercises show how to attack industrial control protocols and detect and defend against ICS/SCADA attacks using MITRE ATT&CK for ICS.

• YouTube
• 1 hour 50 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

A Practical Introduction to BLE Security Without Any Special Hardware

Hands-on BLE security assessment using simulated devices on a Windows laptop and phone, with no special hardware required.

• YouTube
• 2 hours 20 minutes
• Self-Paced
• Conference Talk