44CON Information Security Conference Courses

Using SmartNICs to Provide Better Data Center Security

Explore SmartNIC-based data center security, featuring improved isolation, offload capabilities, and policy scaling. Learn about innovative host introspection techniques for enhanced threat detection and workload integrity.

• YouTube
• 1 hour 7 minutes
• On-Demand
• Conference Talk

JARVIS Never Saw It Coming - Hacking Machine Learning in Speech, Text and Face Recognition

Explore hacking techniques for machine learning systems in speech, text, and facial recognition, including exploits, backdoors, and adversarial attacks. Live demo included.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Catch Me If You Can - Ephemeral Vulnerabilities in Bug Bounties

Explore ephemeral vulnerabilities in bug bounties, their impact, and how to identify and exploit them. Learn from real-world examples and strategies for continuous security assessment.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

ARM Assembly and Shellcode Basics - Workshop

Comprehensive workshop on ARM assembly and shellcode creation, covering basics, execve() shell, and reverse shell. Includes hands-on practice with QEMU emulator and Raspberry Pi hardware.

• YouTube
• 2 hours 16 minutes
• On-Demand
• Conference Talk

BaRMIe - Poking Java’s Back Door

Explore Java's Remote Method Invocation security vulnerabilities, enumeration techniques, and exploitation tools with BaRMIe. Learn about common mistakes and potential solutions in RMI implementations.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Subgraph OS - Hardening a Linux Desktop

Explore Subgraph OS: a hardened Linux desktop with advanced security features, including kernel protection, application sandboxing, and network safeguards.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Cisco ASA Episode 2 - Striking Back - Internals and Mitigations

Explore Cisco ASA internals, reverse engineering techniques, and custom tools for exploit development. Gain insights into vulnerability analysis and mitigation strategies for network security professionals.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Red Team Revenge - Attacking Microsoft ATA

Explore techniques for attacking Microsoft Advanced Threat Analytics, including alert suppression, identity exemption, and remote control. Learn about ATA's vulnerabilities and defensive strategies.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Cracking HiTag2 Crypto - Weaponising Academic Attacks for Breaking and Entering

Explore HiTag2 RFID encryption vulnerabilities and learn to implement attacks for cloning secure building access tags, based on academic research and practical demonstrations.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Secrets Of The Motherboard - Shit My Chipset Says

Explore motherboard intricacies, security features, and hidden functionalities. Uncover potential exploits, design pitfalls, and challenges in hardware security through chipset analysis and datasheet discoveries.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Cryptanalysis of the Enigma Machine

Explore the cryptanalysis of the Enigma machine, its historical significance, and the techniques used to break its code during World War II.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Penetration Testing Considered Harmful

Critique of penetration testing practices, exploring limitations, misconceptions, and potential harm in cybersecurity. Proposes alternative approaches and challenges industry norms.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

USB Flash Drive Forensics

Explore USB flash drive forensics, covering hardware, software, file systems, and forensic techniques. Learn about write blockers, Windows registry analysis, and open-source tools for digital investigations.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Systems Applications Proxy Pwnage

Explore SAP system vulnerabilities, compression algorithms, and attack techniques. Learn about authentication bypass, validation issues, and practical demonstrations for enhanced security awareness.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Supply Chain Unchained - How To Be A Bad SaaS

Explore software supply chain vulnerabilities, focusing on SaaS security. Learn about access control, API restrictions, maturity evaluation, logging, cloud security, and code integrity.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk