NahamSec Courses

Read The Bleeping RFC - Understanding Network Protocols for Security

Explore RFC vulnerabilities and their impact on web security with Inti De Ceukelaire. Learn to identify and exploit logic flaws in protocols for more effective bug hunting and penetration testing.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Command-Line Data-Wrangling for Security Professionals

Mastering command-line tools for efficient data manipulation in offensive security. Learn sorting, regex, grep, find, and JSON processing to enhance your hacking capabilities.

• YouTube
• 47 minutes
• On-Demand
• Free Video

How to Directory Brute Force Properly

Learn effective directory brute forcing techniques, including wordlist selection and hands-on examples, to enhance your offensive security and bug bounty hunting skills.

• YouTube
• 12 minutes
• On-Demand
• Free Video

Attacking Wide Scopes

Explore techniques for attacking wide-scope targets in bug bounty programs. Learn strategies to identify vulnerabilities and maximize your impact when dealing with extensive attack surfaces.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

Hackers Are Hijacking Websites - Subdomain and DNS Takeover

Explore website hijacking through subdomain and DNS takeovers. Learn about vulnerabilities, detection methods, and how to create proof of concepts for securing web assets.

• YouTube
• 11 minutes
• On-Demand
• Free Video

CTF Walkthrough- Hacking An API with Snyk

Detailed walkthrough of API hacking in a Capture The Flag challenge, demonstrating practical offensive security techniques and vulnerability exploitation.

• YouTube
• 11 minutes
• On-Demand
• Free Video

How to Find Every Domain for a Company - Attack Surface Management

Discover techniques for comprehensive domain mapping of companies, enhancing your attack surface management skills for improved cybersecurity and bug bounty hunting.

• YouTube
• 12 minutes
• On-Demand
• Free Video

Smart Contract Series - Launching Your First Smart Contract, Token and NFT

Learn to create and deploy smart contracts, tokens, and NFTs on blockchain platforms. Explore vulnerabilities and gain practical insights into Web3 development and security.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Intro to Smart Contracts

Explore smart contracts: definition, NFT applications, programming tools, and a practical demo. Learn key languages and resources for developing your own blockchain-based agreements.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Attack Surface Management Series - Certificate Transparency

Learn about Certificate Transparency in attack surface management, exploring its importance and implementation in cybersecurity strategies.

• YouTube
• 11 minutes
• On-Demand
• Free Video

What I Learnt from a Year of Triaging Bug Bounty Reports

Insights from a year of triaging bug bounty reports, covering key lessons learned, common pitfalls, and effective strategies for successful vulnerability reporting and management.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk

Critical Bounties via Leaked API Keys

Discover techniques for finding leaked API keys on GitHub, both manually and using tools like TruffleHog. Learn how to leverage these findings for potential critical bounties in bug hunting.

• YouTube
• 16 minutes
• On-Demand
• Free Video

How to Identify and Exploit CVE-2021-43798 - Grafana Unauthenticated Directory Traversal

Learn to identify and exploit the Grafana CVE-2021-43798 vulnerability, including detection methods, working proof-of-concept, and practical exploitation techniques for unauthenticated directory traversal.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Advent of Cyber - Web Exploitation - Cross-Site Scripting (XSS) Explained

Comprehensive explanation of Cross-site Scripting (XSS) in web security, covering its types, risks, and prevention methods. Practical insights for ethical hackers and cybersecurity enthusiasts.

• YouTube
• 10 minutes
• On-Demand
• Free Video

Advent of Cyber - Fuzzing with Burp Suite

Learn fuzzing techniques using Burp Suite in TryHackMe's Advent of Cyber challenge. Enhance your web application security testing skills and discover potential vulnerabilities through automated input manipulation.

• YouTube
• 11 minutes
• On-Demand
• Free Video