OffensiveCon Courses

UEFI and the Task of the Translator: Cross-Architecture UEFI Quines for Exploit Development

Explore UEFI exploit development using cross-architecture UEFI quines as a framework, enhancing your understanding of low-level system vulnerabilities.

• YouTube
• 1 hour 1 minute
• On-Demand
• Free Video

Blasting Past WebP - Exploring Image Format Vulnerabilities

Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.

• YouTube
• 43 minutes
• On-Demand
• Free Video

The V8 Heap Sandbox - Understanding JavaScript Engine Security

Explore V8 engine's heap sandbox implementation, its security implications, and potential vulnerabilities in Chrome's JavaScript engine.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Attacking Windows Device Drivers: Almost Escaping the Sandbox

Explore techniques for attacking Windows device drivers and potential sandbox escape methods in this advanced security analysis presentation.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Defense Through Offense: Microcontroller Security in Meta's First Generation of Smart Glasses

Explore microcontroller security in Meta's smart glasses, focusing on defense strategies through offensive techniques and real-world applications.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Escaping the Safari Sandbox: A Tour of Webkit IPC

Explore Webkit IPC vulnerabilities and techniques for escaping the Safari sandbox, gaining insights into browser security and exploitation.

• YouTube
• 29 minutes
• On-Demand
• Free Video

ACE up the Sleeve: Hacking into Apple's New USB-C Controller

Explore Apple's USB-C controller vulnerabilities and hacking techniques with expert Thomas Roth in this cutting-edge cybersecurity presentation.

• YouTube
• 27 minutes
• On-Demand
• Free Video

How to Fuzz Your Way to Android Universal Root: Attacking Android Binder

Entdecken Sie Techniken zur Ausnutzung von Android Binder-Schwachstellen für Root-Zugriff durch Fuzzing-Methoden und Sicherheitsanalyse.

• YouTube
• 51 minutes
• On-Demand
• Free Video

Attacking the Samsung Galaxy A Boot Chain

Explore Samsung Galaxy A* boot chain vulnerabilities and attack techniques for enhanced mobile security understanding.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Half Measures and Full Compromise: Exploiting Microsoft Exchange PowerShell Remoting

Explore Microsoft Exchange PowerShell Remoting vulnerabilities and exploitation techniques for enhanced cybersecurity awareness and defense strategies.

• YouTube
• 31 minutes
• On-Demand
• Free Video

The Mines of Kakadûm: Blindly Exploiting Load-Balanced Services

Explore techniques for blindly exploiting load-balanced services in "The Mines of Kakadûm" presentation, uncovering vulnerabilities in distributed systems.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Booting with Caution: Dissecting Secure Boot's Third-Party Attack Surface

Dissect Secure Boot's third-party attack surface, exploring vulnerabilities and potential exploits in boot processes.

• YouTube
• 56 minutes
• On-Demand
• Free Video

Beyond Android MTE: Navigating OEM's Logic Labyrinths

Explore advanced Android security, focusing on Memory Tagging Extension (MTE) and OEM-specific implementations. Gain insights into exploiting vulnerabilities in custom logic.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Open Sesame: Stack Smashing Your Way into Opening Doors

Explore stack smashing techniques to bypass security measures in electronic door locks, uncovering vulnerabilities and potential exploits in physical access control systems.

• YouTube
• 42 minutes
• On-Demand
• Free Video

One SMS to Root Them All: Exposing Critical Threats in Connected Devices

Explore critical vulnerabilities in connected devices through SMS exploitation, uncovering potential threats to millions of users worldwide.

• YouTube
• 40 minutes
• On-Demand
• Free Video