BSides Budapest IT Security Conference Courses

The Adversary Mindset - Practical Examples from the Field

Dive into real-world cyber attack scenarios and defense strategies, exploring adversary tactics, stealth techniques, and effective detection methods for enhanced security operations.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Batch and Breaches in Operational Technology - Windows Security Detection Techniques

Discover effective techniques for detecting cyber threats in OT environments using Windows-compatible batch scripts, focusing on methods that work across legacy and modern systems without compromising operations.

• YouTube
• 48 minutes
• On-Demand
• Free Video

GLIBC Heap Overflow Vulnerability and Exploitation - CVE-2023-6246

Delve into the mechanics and exploitation of the critical GLIBC heap overflow vulnerability (CVE-2023-6246), exploring privilege escalation techniques and practical heap overflow concepts.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Scaling Runtime Application Security - How eBPF is Solving Decade-Long Challenges

Discover how eBPF revolutionizes Runtime Application Security, addressing long-standing challenges in performance, maintenance, and implementation effectiveness for modern security solutions.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Breaking the Modbus Protocol to Cause PLC DoS Attacks - Security Analysis and Demonstration

Discover how to exploit Modbus protocol vulnerabilities in industrial systems through live demonstrations of Man-in-the-Middle attacks, data dumping, and PLC DoS using Python scripts on real hardware.

• YouTube
• 45 minutes
• On-Demand
• Free Video

10 macOS Persistence Techniques - Detection and Implementation

Discover 10 unique macOS persistence techniques, from common admin methods to lesser-known approaches, with practical detection strategies for IT security professionals.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Multiparty Pseudonymization and Anonymization - Understanding GDPR Data Protection Methods

Explore the critical differences between anonymization and pseudonymization in GDPR compliance, featuring hash-based and encryption-based protocols for secure data handling.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Parser Differentials: Finding Security Vulnerabilities in JSON Parsing

Explore the security implications of parser differentials in JSON and other formats, learning how fuzzing techniques can identify inconsistencies between multiple parsers for potential exploits.

• YouTube
• 43 minutes
• On-Demand
• Free Video

AI Security: Attacks, Defense, and Practical Applications

Explore AI security from a hacker's perspective, covering vulnerability classes, attack patterns, and defensive strategies, with practical demos and prompts for security practitioners.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Hackable Synthesizers - Creating Custom Sound Processors and Instruments

Explore the intersection of music and hacking through synthesizer platforms, discovering how to create custom sound processors and unique instruments using development boards and coding.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Acceptable Use of Internet - Categorizing the Web at Scale

Discover how machine learning and neural networks can effectively categorize web content at scale, enhancing organizational security through URL-based classification and employee browsing risk assessment.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Abusing ICMPv6 to Manipulate Network Traffic - Network Layer Attack Techniques

Discover how to exploit ICMPv6 protocol vulnerabilities to manipulate network traffic, exploring proof-of-concept attacks against Windows and CentOS systems through legitimate protocol functionalities.

• YouTube
• 38 minutes
• On-Demand
• Free Video

The Insider Threat: EDR Solutions for Detecting Rogue Personnel

Discover proactive methods for identifying insider threats using EDR solutions, focusing on unique threat hunting techniques to detect potential rogue personnel within organizations.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Offensive Rust Development for Windows Security Evasion

Discover how to build a stealthy Rust-based Windows application that bypasses modern security protections, including sandbox analysis, browser protection, and endpoint security measures.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Understanding Modern Injection Attacks - From OWASP Top 10 to Advanced Techniques

Explore the evolving landscape of injection attacks beyond OWASP TOP 10, understanding diverse attack vectors and why this security threat remains persistently challenging.

• YouTube
• 24 minutes
• On-Demand
• Free Video