NorthSec Courses

Ichthyology - Phishing as a Science

Explore the psychology of phishing, analyze real-world attacks, and learn evidence-based prevention techniques. Discover how to protect against credential theft and evaluate the effectiveness of phishing training.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Quick Retooling with .NET Payloads

Explore dynamic .NET implants for red teams, focusing on flexible retooling, OpSec, and overcoming static defenses using DLRium Managed Execution toolkit.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Brain Implants and Mind Reading

Explore brain-computer interfaces, their current capabilities, and future implications. Delve into neurotechnology's potential, security concerns, and societal impact as we approach a cyberpunk reality.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Getting Ahead of the Elliptic Curve

Demystifying elliptic curve cryptography: explore its applications in HTTPS, Bitcoin, and beyond. Learn about point addition, ECDH, digital signatures, and post-quantum algorithms without deep mathematical knowledge.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Exploits in Wetware

Exploits in wetware: social engineering techniques, OSINT strategies, and defensive measures against human vulnerabilities in cybersecurity, based on real-world experiences.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

One Step Before Game Hackers - Instrumenting Android Emulators

Explore native hooking on Android emulators, understanding process start routines and emulation strategies. Learn why existing frameworks fail and how to create one that works for game cheating.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Data Breaches - Barbarians in the Throne Room

Analyze hundreds of data breach disclosures to understand common vulnerabilities, focusing on preventable issues like patching and configuration failures, and their impact on enterprises.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Prototype Pollution Attacks in NodeJS Applications

Explore prototype pollution attacks in NodeJS, including APIs vulnerable to pollution, potential impacts, and defensive strategies. Learn from real-world examples and security research findings.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

The Blackbear Project

Explore a modified OpenSSH daemon that enhances post-exploitation capabilities, bypasses network restrictions, and provides reliable interactive shell access for penetration testing and security research.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Evading Vulnerability Exploitation Through Secure Android Development

Explore Android security challenges, common attack vectors, and best practices for secure development. Learn to protect consumers from evolving mobile threats.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Abusing Webhooks for Command and Control

Explore techniques for establishing covert command and control communication using webhooks, bypassing strict network defenses and avoiding detection in penetration testing scenarios.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Backslash Powered Scanning - Implementing Human Intuition

Innovative web scanner using intuitive techniques to detect injection vulnerabilities, offering WAF evasion, minimal network footprint, and adaptability to input filtering. Explores advanced exploitation methods and handles complex findings.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Don't Kill My Cat

Evade antivirus and security layers with polyglot files and assembly obfuscation. Learn to create undetectable payloads for penetration testing using a versatile tool.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Hacking POS Systems

Explore PoS system vulnerabilities, from physical access to data extraction. Learn about kiosk breakouts, privilege escalation, and real-world examples of critical security flaws in hotel management platforms.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Data Science Tools and Techniques for the Blue Team

Explore data science tools and techniques for cybersecurity, including statistical analysis and machine learning, to enhance threat detection and defense capabilities in large-scale corporate environments.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk