Exploit Development Courses and Certifications

Hack In The Box Security Conference

Hacking Jenkins

Exploring Jenkins vulnerabilities, including dynamic routing misuse and Groovy sandbox escape. Learn to build custom gadgets and exploit Jenkins through unconventional methods.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

MIPS-X - The Next IoT Frontier

Explore MIPS-based IoT device research with a framework for efficient emulation, vulnerability analysis, and exploit development. Gain insights into CPU architectures, virtualization, and cross-compilation techniques.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

IEEE

Evaluation of the Executional Power in Windows Using Return Oriented Programming

Explore Windows vulnerabilities through Return Oriented Programming, evaluating execution power and discussing implications for system security in this IEEE workshop presentation.

• YouTube
• 23 minutes
• On-Demand
• Free Video

0xdade

Cisco SMB Products - Critical Vulnerabilities - 0-Day Release

Detailed examination of critical 0-day vulnerabilities in Cisco SMB switches, including web application and API exploits, leading to complete endpoint compromise and data leakage.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Association for Computing Machinery (ACM)

Chainsaw - Chained Automated Workflow-based Exploit Generation

Explore automated workflow-based exploit generation for web applications using Chainsaw, a novel approach to identify and exploit vulnerabilities through informed traversal and workflow inference.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Attacking VxWorks - From Stone Age to Interstellar

Explore vulnerabilities in VxWorks, a real-time operating system, from historical exploits to cutting-edge attack techniques. Gain insights into securing critical infrastructure and embedded systems.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Reverse Engineering and Exploiting Font Rasterizers - The OpenType Saga

Explore critical vulnerabilities in OpenType font handling across popular software, revealing potential for arbitrary code execution and bypassing exploit mitigations. Learn about reverse-engineering techniques and in-depth vulnerability analysis.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Stegosploit - Drive by Browser Exploits Using Only Images

Innovative technique encoding browser exploits in images, combining steganography and polyglots for undetectable delivery. Explores implementation, challenges, and implications for cybersecurity.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Leverage One-shot UAF to a Minigun

Exploración de técnicas avanzadas de explotación de vulnerabilidades Use-After-Free en Adobe Flash, incluyendo el método UAUAF para obtener acceso completo a la memoria y ejecución de código arbitrario.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Exploiting 64 Bit IE on Windows 8.1 - The Pwn2Own Case Study

Detailed exploration of vulnerabilities and exploit techniques used to compromise 64-bit Internet Explorer on Windows 8.1, including ASLR & CFG bypass and sandbox escape, as demonstrated at Pwn2Own 2015.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

PinPadPwn

Explore vulnerabilities in payment terminals, including memory corruption and code execution risks. Learn about attack surfaces, research approaches, and potential payloads in chip-and-pin systems.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

HeapLab Taster - GLIBC Heap Exploitation

Dive into GLIBC heap exploitation techniques with expert Max Kamper. Learn advanced memory corruption strategies and enhance your cybersecurity skills in this intensive session.

• YouTube
• 1 hour 9 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Introduction to GLIBC Heap Exploitation

Explore GLIBC heap exploitation techniques with expert Max Kamper. Learn essential concepts, attack vectors, and practical strategies for identifying and exploiting heap vulnerabilities in Linux systems.

• YouTube
• 1 hour 30 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Windows Pwn 7 OEM - Owned Every Mobile?

Explore Windows 7 vulnerabilities and mobile device security with expert Alex Plaskett. Gain insights into potential exploits and learn strategies for protecting OEM systems.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

NorthSec

The Sednit Group, Cyber Espionage in Eastern Europe

Explore the Sednit group's cyber espionage tools, recent campaigns, and exploitation techniques targeting Eastern Europe, with a focus on Ukraine-related topics and custom exploit-kits.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk