Command Injection Courses and Certifications

Black Hat

Practical Exploitation Using A Malicious Service Set Identifier - SSID

Explore SSID exploitation techniques for wireless device attacks, including XSS, CSRF, and command injection. Learn about limitations, risk factors, and see live demonstrations of these methods.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Black Hat

Contemporary Automatic Program Analysis

Explore automatic program analysis techniques for vulnerability discovery, from historical context to cutting-edge methods, with practical examples and demos for effective security research.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Black Hat

Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells

Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Black Hat

Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells

Explore critical vulnerabilities in network storage devices, their impact on data security, and implications for network infrastructure. Learn about attack methods and the importance of robust security measures.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

OWASP Foundation

HUNT: Data-Driven Web Hacking and Manual Testing

Turbocharge web hacking with HUNT, a Burp Suite extension using real threat intelligence to provide parameter-level vulnerability suggestions and organize testing methodologies for more thorough assessments.

• YouTube
• 44 minutes
• On-Demand
• Free Video

OWASP Foundation

Hacking Fantasy Sports Sites - Mobile App Security Vulnerabilities

Explore mobile app vulnerabilities through fantasy sports hacking. Learn techniques for intercepting traffic, exploiting formats like JSON and REST, and manipulating data in popular applications.

• YouTube
• 46 minutes
• On-Demand
• Free Video

OWASP Foundation

Why Security Fails and How to Solve It - Lessons from Real-World Assessments

Explore real-world security failures and innovative solutions with insights from Praetorian's field experiences. Learn actionable steps to enhance cybersecurity through smarter practices and cutting-edge tools.

• YouTube
• 24 minutes
• On-Demand
• Free Video

OWASP Foundation

Serverless Infections - Malware in Serverless Computing Environments

Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.

• YouTube
• 30 minutes
• On-Demand
• Free Video

44CON Information Security Conference

Dial V for Vulnerable - Attacking VoIP Phones

Explore VoIP phone vulnerabilities, attack methods, and security recommendations. Learn firmware access, emulation approaches, and exploit development for various VoIP devices.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

The Insecurity of Cloudless Smart Door Systems

Explore vulnerabilities in cloudless smart door systems for large buildings, focusing on IP-gateway security risks and potential exploits in intercom-IP integration.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Black Hat

Command Injection in F5 iRules

Explore command injection vulnerabilities in F5 iRules, focusing on syntax, exploitation techniques, and security implications for BigIP F5 products used in high-performance web traffic routing.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Attacking Industrial Remote Controllers

Exploring vulnerabilities in industrial RF remote controllers, revealing security flaws and potential attacks. Includes demos, findings, and recommendations for improving safety in IIoT applications.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Journey to Command Injection - Hacking the Lenovo ix4-300d

Demonstration of chaining vulnerabilities to remotely exploit a Lenovo NAS device, showcasing command injection, XSS, and CSRF techniques for full system compromise.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

When Bandit Strikes - Defend Your Python Code

Discover and defend against common security flaws in Python code using Bandit. Learn customization, CI pipeline integration, and extension techniques for enhanced code security.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Owning the Smart Home with Logitech Harmony Hub

Explore reverse engineering of Logitech's Harmony smart home hub, uncovering vulnerabilities and discussing their implications for device security and potential exploitation.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk