Code Injection Courses and Certifications

OWASP Foundation

OWASP Serverless Top 10 - Security Risks and Protections

Explore serverless security risks, challenges, and protective measures. Learn about OWASP Serverless Top 10 and DVSA tool for understanding serverless security implications and processes.

• YouTube
• 29 minutes
• On-Demand
• Free Video

OWASP Foundation

Active Scan Augmenting Manual Testing with Attack Proxy Plugins

Explore advanced web security techniques with ActiveScan++, a Burp Suite plugin for detecting complex vulnerabilities like host header poisoning and code injection through heuristic probes and automated analysis.

• YouTube
• 39 minutes
• On-Demand
• Free Video

OWASP Foundation

iOS App Integrity: Enhancing Security with Encrypted Code Modules

Explore iOS app security vulnerabilities and learn advanced protection techniques like Encrypted Code Modules (ECM) to safeguard against static analysis, binary patching, and other common attacks.

• YouTube
• 41 minutes
• On-Demand
• Free Video

OWASP Foundation

The Bug Hunter's Methodology 2.0 - Advanced Web Application Security Testing

Explore cutting-edge techniques and tools for discovering vulnerabilities in web applications, including XSS, SSTI, SSRF, code injection, and more. Learn from expert Jason Haddix's updated methodology for effective penetration testing.

• YouTube
• 46 minutes
• On-Demand
• Free Video

BSidesLV

Please Inject Me - A x64 Code Injection

Explore advanced x64 code injection techniques, focusing on practical implementation and security implications in modern Windows systems.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Black Hat

Injectso - Modifying and Spying on Running Processes Under Linux

Explore advanced techniques for modifying and monitoring active Linux processes, focusing on injection methods and real-time surveillance strategies.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Black Hat

.NET from the Hacker's Perspective - Part 2

Explore advanced .NET security vulnerabilities and exploitation techniques, focusing on real-world attack scenarios and defensive strategies for developers and security professionals.

• YouTube
• 1 hour 26 minutes
• On-Demand
• Conference Talk

Black Hat

Dirty Vanity - A New Approach to Code Injection & EDR Bypass

Explore a novel code injection technique, Dirty Vanity, that challenges current detection methods and expands attack possibilities by exploiting Windows' forking mechanism.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Black Hat

Knockout Win Against TCC - New Ways to Bypass Your MacOS Privacy Mechanisms

Explore techniques to bypass MacOS privacy mechanisms, including vulnerabilities in TCC framework, code injections, and system tool abuse. Compare security improvements between Monterey and Big Sur.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Black Hat

Dirty Bin Cache - A New Code Injection Poisoning Binary Translation Cache

Uncover a novel code injection vulnerability in Rosetta 2, exploring its impact on Apple Silicon Macs and discussing potential security implications for binary translation caches.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

EuroPython Conference

CPython Bugs and Risky Features

Explore security risks in CPython, including directory vulnerabilities, code injection possibilities, and socket issues. Learn about potential threats and mitigation strategies for Python developers and administrators.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

try! Swift Conference

AST Meta-programming

Explore AST meta-programming in Swift for code injection and aspect-oriented programming. Learn practical examples and automation techniques with SauceKit.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

BSidesLV

Serverless Infections - Malware Just Found a New Home

Explore serverless architecture vulnerabilities and learn how malware can exploit AWS Lambda functions, with insights on prevention and security best practices.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

nullcon

Putting It All Together - Building an iOS Jailbreak from Scratch

Comprehensive guide to building an iOS jailbreak, covering memory vulnerabilities, kernel exploitation, sandbox escape, filesystem remounting, and code injection techniques for the latest Apple devices.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

nullcon

PwdLess - Exploitation Tales from RouterLand

Explore IoT device security through an attacker's perspective, covering fuzzing, reverse engineering, and exploit development. Learn about vulnerabilities, remote execution techniques, and challenges in IoT security.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk