Hack In The Box Security Conference Courses

I Own Your Building - Management System

1 review

Explore vulnerabilities in Building Management Systems, their impact on critical facilities, and the research process behind discovering these security flaws in various BMS components and products.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

API Security in the Age of Microservices

1 review

Explore API security challenges in microservices architectures and learn strategies for distributed security, including gateways, service mesh, authentication, and network segmentation.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Blockchain - The New Line Of Defense

1 review

Explore blockchain technology as a cutting-edge defense mechanism in cybersecurity, examining its potential applications and impact on digital security strategies.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Information Collection of Third-Party SDKs

Innovative static taint analyzer for third-party SDKs, addressing challenges in user data protection and privacy policy compliance. Achieves high accuracy in identifying undisclosed information collection behaviors.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

The Ransomware Protection Full Of Holes

Exposé des failles de la protection contre les ransomwares de Windows, démonstration de méthodes de contournement et d'attaques à distance, avec vidéos à l'appui.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Suborner - Windows Bribery for Invisible Persistence

Discover a stealthy Windows persistence technique that creates invisible machine accounts, evades detection, and impersonates existing users. Learn about the Suborner Attack's implementation and effectiveness.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

Unlocking KeeLoq - A Reverse Engineering Story

Reverse engineering KeeLoq systems: extracting firmware, decrypting transmissions, and integrating with home automation. Practical approach to exploiting known vulnerabilities in remote keyless entry systems.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Adventures in Security Research

Explore defensive security, journalism protection, and diverse tech challenges with insights on gun hacking, malware analysis, and mission-driven work from a seasoned security expert.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Breaking Web3 - Exploitation Techniques for Cryptocurrency Hacking

Exploration of common vulnerabilities in Web3 projects, covering blockchain topology, node exploitation, DoS attacks, social engineering, and smart contract vulnerabilities in cryptocurrency systems.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

One-Click to Completely Takeover a MacOS Device

Explore vulnerabilities in MacOS security features and learn how to bypass them for a one-click takeover of both Apple Silicon and Intel Mac devices. Includes live demo and expert insights.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

EDR Evasion Primer for Red Teamers

Insights on EDR inner workings and evasion techniques for red teamers, covering test lab results, reverse engineering findings, and successful attack methodologies to circumvent endpoint protection.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Exploiting a Limited UAF on Ubuntu 22.04 to Achieve LPE

Detailed exploration of exploiting a Linux kernel vulnerability in Ubuntu 22.04 to achieve local privilege escalation, focusing on advanced exploitation techniques and bypass methods.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

E'rybody Gettin' TIPC - Demystifying Remote Linux Kernel Exploitation

Demystifying remote Linux kernel exploitation through a stack overflow vulnerability in a network module, offering insights into the exploit development process and low-level kernel internals.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Attacking WPA3 - New Vulnerabilities And Exploit Framework

Uncovers critical vulnerabilities in WPA3, including DoS attacks and traffic interception. Presents a new Wi-Fi testing framework for researchers to identify and exploit these weaknesses in various devices.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Random Walk Through A Few Million Things

Explore IoT security challenges in enterprises, examining millions of devices to reveal vulnerabilities, default credentials, and outdated firmware. Gain insights into the current state of IoT security.

• YouTube
• 1 hour 8 minutes
• On-Demand
• Conference Talk