Attack Surface Analysis Courses and Certifications

Assets, Threats, and Vulnerabilities

2993 ratings at Coursera

Explore asset security, vulnerabilities, and threats in cybersecurity. Learn data handling, encryption, authentication, and threat modeling to protect organizational assets and mitigate risks.

• Coursera
• 1 day 1 hour 35 minutes
• On-Demand
• Free Online Course (Audit)

Rawr - Rapid Assessment of Web Resources

Explore rapid web resource assessment techniques, including crawling, scanning, and fuzzing, to enhance cybersecurity and identify potential vulnerabilities in web applications.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Black Hat

Analyzing & Breaking QNX Exploit Mitigations and PRNGs for Embedded Systems

Dissection of QNX's security features, including exploit mitigations and random number generators, for embedded systems in automotive, industrial, defense, and medical sectors.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Burp Suite - Basic Concepts for Web Pentesting

Learn essential web pentesting techniques using Burp Suite, covering parameter passing, code injection, XSS, LFI/RFI attacks, and SQL injection for effective security testing of web applications.

• YouTube
• 1 hour 30 minutes
• On-Demand
• Free Video

Black Hat

Hunting for Bugs, Catching Dragons

Explore email exploit research, focusing on Outlook and Exchange vulnerabilities. Learn about attack surfaces, RTF issues, and various entry points for discovering and addressing security flaws.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Black Hat

Subverting Sysmon - Application of a Formalized Security Product Evasion Methodology

Explore methodologies for subverting Sysmon, a security monitoring tool, through data collector strategies and configuration analysis to enhance adversarial techniques against enterprise defenses.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

NahamSec

Scaling Up - Automated Attack Surface Discovery with Intrigue Core

Explore automated attack surface discovery using Intrigue Core for efficient cybersecurity scaling. Learn techniques to identify vulnerabilities and enhance your security posture.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

NahamSec

Finding 0days in Enterprise Web Applications

Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

HackerOne

Security at Government Agencies - Hacking the US Government

Experts discuss hacking US government systems, vulnerability disclosure programs, and cybersecurity challenges in federal agencies. Insights on bug bounties, tech surges, and public-facing systems.

• YouTube
• 41 minutes
• On-Demand
• Free Video

USENIX

Hell of a Handshake - Abusing TCP for Reflective Amplification DDoS Attacks

Explores TCP-based amplification DDoS attacks, revealing vulnerabilities in the handshake process and identifying thousands of potential amplifiers through Internet-wide scans of common TCP protocols.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

Black Hat

The Linux Kernel Hidden Inside Windows 10

Explore the Linux kernel in Windows 10, its implementation, security implications, and potential vulnerabilities. Learn about system calls, process management, and attack surfaces in this unique OS integration.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Black Hat

Review and Exploit Neglected Attack Surfaces in iOS 8

Explores overlooked iOS 8 vulnerabilities through fuzzing and code auditing, revealing system daemon crashes and memory corruption errors triggerable via XPC, plus an iOS kernel 0day.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Black Hat

Understanding the Attack Surface and Attack Resilience of Project Spartan's New EdgeHTML Rendering Engine

Explore EdgeHTML's attack surface, compare it with MSHTML, and analyze exploit mitigations in Windows 10's new rendering engine for enhanced web security understanding.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Black Hat

Understanding HL7 2.X Standards - Pen Testing - and Defending HL7 2.X Messages

Explore HL7 2.X standards in healthcare, learn pen testing techniques for medical systems, and discover strategies to secure HL7 2.X messages against potential vulnerabilities and attacks.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

BSidesLV

Managing Security with the OWASP Assimilation Project

Explore continuous discovery, scalability, and human monitoring in cybersecurity with the OWASP Assimilation Project. Learn about architecture, attack surface analysis, and practical demonstrations.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk