Exploit Development Courses and Certifications

Recon Conference

A Little Less Conversation, A Little More ActionScript

Techniques for in-depth reverse engineering of Flash, mapping ActionScript to undocumented counterparts, and analyzing vulnerabilities in Adobe Flash Player for improved exploit research.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Recon Conference

The Last Generic Win32K KASLR Defeat in Windows

Detailed exploration of Windows kernel security, focusing on KASLR defeats, heap vulnerabilities, and recent changes in RS4. Insights into potential exploits and current Windows KASLR state.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

IEEE

Your Exploit is Mine - Automatic Shellcode Transplant for Remote Exploits

Innovative technique for automatic shellcode transplantation in remote exploits, enabling efficient reuse and adaptation of existing exploits with new shellcode through symbolic tracing and layout remediation.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

A QEMU Black Box Escape Via USB Device

Exploring a QEMU virtual machine escape technique using USB device vulnerabilities, focusing on black box scenarios without prior system information for enhanced cloud security.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Bypassing DEP With Jump-Oriented Programming

Explore Jump-Oriented Programming (JOP) for code-reuse attacks, including its fundamentals, the JOP ROCKET tool, and techniques to bypass DEP and ASLR in Windows environments.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Fuzzing - Finding Your Own Bugs and 0days

Aprenda a criar e usar um fuzzer para encontrar bugs e vulnerabilidades, incluindo técnicas para escrever exploits e obter acesso a sistemas. Demonstrações práticas incluídas.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Jailbreaks Never Die - Exploiting iOS 13.7

Unveiling iOS 13.7 exploit chain: kernel vulnerabilities, mitigation bypasses, and techniques for reading/writing kernel memory. Insights into iOS security research and jailbreak development.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

One-Click to Completely Takeover a MacOS Device

Explore vulnerabilities in MacOS security features and learn how to bypass them for a one-click takeover of both Apple Silicon and Intel Mac devices. Includes live demo and expert insights.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Exploiting a Limited UAF on Ubuntu 22.04 to Achieve LPE

Detailed exploration of exploiting a Linux kernel vulnerability in Ubuntu 22.04 to achieve local privilege escalation, focusing on advanced exploitation techniques and bypass methods.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

E'rybody Gettin' TIPC - Demystifying Remote Linux Kernel Exploitation

Demystifying remote Linux kernel exploitation through a stack overflow vulnerability in a network module, offering insights into the exploit development process and low-level kernel internals.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Attacking WPA3 - New Vulnerabilities And Exploit Framework

Uncovers critical vulnerabilities in WPA3, including DoS attacks and traffic interception. Presents a new Wi-Fi testing framework for researchers to identify and exploit these weaknesses in various devices.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Recreating an iOS 0-Day Jailbreak Out of Apple's Security Updates

Detailed walkthrough of recreating an iOS jailbreak from security updates, covering vulnerability discovery, exploit development, and jailbreak creation. Includes practical demonstration and insights.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Advanced SOHO Router Exploitation

Explore advanced techniques for exploiting SOHO routers, including firmware analysis, vulnerability discovery, and ARM/MIPS exploit development. Learn about 0-day vulnerabilities and post-exploitation concepts for household routers.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Journey to Command Injection - Hacking the Lenovo ix4-300d

Demonstration of chaining vulnerabilities to remotely exploit a Lenovo NAS device, showcasing command injection, XSS, and CSRF techniques for full system compromise.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Abusing WCF Endpoint for RCE and Privilege Escalation

Explore WCF vulnerabilities in .NET programs, focusing on privilege escalation and remote code execution. Learn to identify and exploit these bugs through a real-world case study.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk