nullcon Courses

Bug Bounty Programs - Crowd Sourcing Security

Explore Mozilla's bug bounty program, its history, benefits, and challenges. Learn how to implement similar programs and their advantages over black market alternatives.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Inception of Graphical Passwords

Explore innovative graphical password authentication, offering enhanced security and memorability compared to traditional alphanumeric methods. Learn implementation techniques and future possibilities.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

SMS to Meterpreter - Fuzzing USB Modems

Explore innovative attacks on USB data modems, including fuzzing techniques and SMS payload execution. Learn about vulnerabilities, reverse engineering, and USB sniffing for offensive security research.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Introduction to Threat Modeling

Learn threat modeling basics, STRIDE model, and OWASP Threat Dragon in this interactive session. Gain practical skills to identify and mitigate security risks in software development.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

Using k8s to Deploy Security Services in a Hostile World

Explore deploying security tools in challenging environments using Kubernetes for scalability and minimal customization. Learn a three-step plan and cloud setup process for inherited projects.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

Migrate Securely from On Prem to Azure Cloud

Learn strategies for secure migration from on-premise to Azure Cloud, focusing on real-time scenarios, architecture design considerations, and Azure services for seamless transition while addressing security challenges.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

From Reactive to Proactive - Operationalizing Your Threat Intel

Cybersecurity experts discuss operationalizing threat intelligence, moving from reactive to proactive approaches, and addressing challenges in cloud adoption and workforce training for enhanced security.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Deep Dive into ART - Android Runtime for Dynamic Binary Analysis

Explore Android Runtime's evolution, optimization techniques, and structure. Learn to analyze apps by modifying ART to extract real-time information and develop effective analysis techniques without code access.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

An Azure Sphere Security Breakdown

Explore Azure Sphere IoT security features, vulnerabilities discovered during Microsoft's research challenge, and a privilege escalation chain for acquiring Azure Sphere Capabilities.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Telecom Security Challenges in 5G

Explore 5G telecom security challenges, improvements, and implementation issues. Learn about virtualization risks, DDOS threats, and industry initiatives like NESAS in this comprehensive overview.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Security Research and Disclosure - The Unauthorized Biography

Explore the evolution of security research and disclosure, from historical "unbreakable locks" to modern challenges in IoT, blockchain, and AI, with insights on ethical hacking and vulnerability reporting.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Exploiting XPC in AntiVirus Software

Explore vulnerabilities in macOS antivirus software through XPC exploitation, uncovering security flaws and providing guidance for developers to create secure XPC services.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Enterprise Security Architecture - Is It Time for a Booster Shot?

Explore evolving enterprise security architecture beyond traditional layered defense, addressing modern challenges like advanced hacking, cloud adoption, and remote work to enhance organizational cybersecurity.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Extract Data from Damaged Android Mobile Device - Version 7.X.X

Comprehensive workshop on extracting data from damaged Android devices, covering soldering, retrieval of device information, and extraction of various data types for forensic analysis.

• YouTube
• 1 hour 51 minutes
• On-Demand
• Conference Talk

Machine Learning for Intrusion Attempt Detections

Explore machine learning for real-time intrusion detection in cybersecurity. Learn to build a system using AI techniques, featuring insights from Google's Lead Security Engineer Varun Kohli.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk