NorthSec Courses

Go Reverse-Engineering Workshop

Develop specialized skills for reverse-engineering Go binaries, focusing on offensive security tooling. Learn methodologies and disassembler plugins to tackle this challenging language.

• YouTube
• 2 hours 28 minutes
• On-Demand
• Conference Talk

Tokens, Everywhere!

Hands-on deep-dive into Azure AD's OAuth implementation, covering JWT, token types, and attack scenarios. Learn to secure environments and detect token abuse.

• YouTube
• 2 hours 22 minutes
• On-Demand
• Conference Talk

10 Things I Wish I Knew Before My First Incident

Essential insights for effective incident response, covering crucial aspects often overlooked by beginners. Learn from real-world experiences to enhance your preparedness and decision-making during critical cybersecurity events.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Jumping the Air Gap - 15 Years of Nation-State Efforts

Explore nation-state techniques for breaching air-gapped networks, analyzing similarities across frameworks and providing practical advice to enhance security and detect potential attacks.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Introduction to Cryptographic Attacks

Hands-on workshop exploring real-world cryptographic vulnerabilities. Implement attacks using provided tools, gaining practical experience in identifying and understanding common cryptographic weaknesses.

• YouTube
• 2 hours 22 minutes
• On-Demand
• Conference Talk

Malware Morphology for Detection Engineers

Explore diverse malware implementations within techniques, analyze tool differences, and learn to build resilient detection rules by modeling procedures and evaluating similarities.

• YouTube
• 2 hours 47 minutes
• On-Demand
• Conference Talk

Invoke-DOSfuscation - Techniques for CMD Obfuscation

Explore advanced CMD obfuscation techniques used by threat actors, including string manipulation and encoding methods. Learn to create and detect complex obfuscated payloads using the Invoke-DOSfuscation framework.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Python and Machine Learning

Explore machine learning for malware categorization using Python and scikit-learn. Learn to transform data, apply clustering algorithms, and generate YARA rules for effective malware hunting.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Binary Analysis, Meet the Blockchain

Explore symbolic execution for Ethereum smart contract analysis, addressing technical challenges and introducing Manticore, an open-source tool for enhancing contract security audits.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Surprise Supplies

Exploring major supply chain attacks of 2017, including MeDoc and CCleaner compromises. Analyzes attacker methods, malware used, and impact on victims. Discusses the history and future of supply chain attacks.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

What Are Containers Exactly and Can They Be Trusted?

Explore container technologies, their evolution, security features, and management tools. Compare application and system containers, and learn to choose the right container for your needs.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Homeward Bound - Scanning Private IP Space with DNS Rebinding

Explore DNS Rebinding attacks, their resurgence, and tools for network reconnaissance from inside browsers. Learn about a "localhost census" page that enumerates HTTP services on visitors' computers.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Smart Contract Vulnerabilities

Explore famous smart contract vulnerabilities, including the DAO hack and Parity wallet issues. Learn Ethereum's quirks and general principles of smart contract security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Only an Electron Away from Code Execution

Explore security vulnerabilities in Electron framework, focusing on XSS risks in desktop applications. Learn about attack vectors, CVEs, and see live demos of exploiting vulnerable Electron apps.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Attacking Linux Moose Unraveled an Ego Market

Unraveling a large-scale botnet conducting social media fraud through honeypots and HTTPS man-in-the-middle attacks. Explores technical details, methodology, and market dynamics behind social media fraud.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk