Fuzzing Courses and Certifications

Cyber Mentor

Ethical Hacking in 15 Hours - 2023 Edition - Learn to Hack

1 review

Comprehensive ethical hacking training covering advanced techniques like subdomain hunting, vulnerability scanning, exploitation, and buffer overflows. Includes hands-on practice with multiple virtual machines.

• YouTube
• 7 hours 17 minutes
• On-Demand
• Free Video

Cyber Mentor

Buffer Overflows Made Easy - 2022 Edition

Learn to exploit buffer overflows with hands-on techniques including spiking, fuzzing, finding offsets, and generating shellcode. Gain practical skills for ethical hacking and cybersecurity.

• YouTube
• 1 hour 43 minutes
• On-Demand
• Free Video

Cyber Mentor

Buffer Overflows Made Easy

Learn to exploit 32-bit Windows buffer overflows through step-by-step guidance, from introduction to gaining shells, with practical techniques for cybersecurity enthusiasts.

• YouTube
• 30 minutes
• On-Demand
• Free Video

David Bombal

Burp Suite

Comprehensive introduction to Burp Suite for web application security testing, covering key features like proxy, repeater, and intruder. Includes hands-on demos for SQL injection and fuzzing.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Free Video

IEEE

UTOPIA - Automatic Generation of Fuzz Driver Using Unit Tests

Explore automatic fuzz driver generation using unit tests with UTOPIA, enhancing software testing efficiency and effectiveness for improved security and reliability.

• YouTube
• 14 minutes
• On-Demand
• Conference Talk

WEareTROOPERS

Testing and Fuzzing the Kubernetes Admission Configuration

Explore techniques for testing and fuzzing Kubernetes admission configurations to enhance security and identify vulnerabilities in container orchestration systems.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

USENIX

Automated Reverse Engineering Using Lego

Innovative use of Lego robots for automated reverse engineering of smartcard readers, revealing security vulnerabilities through state machine learning and fuzzing techniques.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

Black Hat

Fuzzing the Native NTFS Read-Write Driver - NTFS3 - in the Linux Kernel

Explore advanced fuzzing techniques for the NTFS3 driver in Linux, focusing on context-aware methods to efficiently identify vulnerabilities in this complex subsystem.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Black Hat

EBPF ELFs JMPing Through the Windows

Explore eBPF for Windows: capabilities, security model, design, and attack surface. Uncover vulnerabilities, witness fuzzing demos, and discuss exploitation challenges in Windows Protected Process.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Black Hat

Into the Core - In-Depth Exploration of Windows 10 IoT Core

Explore Windows 10 IoT Core internals, security features, attack surfaces, and assessment methods. Learn to secure IoT devices and understand their role in the evolving Internet of Things landscape.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Black Hat

Fuzzing Android - A Recipe for Uncovering Vulnerabilities Inside System Components in Android

Explore a fuzzing approach to uncover vulnerabilities in Android's core system components. Learn about data generation, test execution, logging, and triage mechanisms for effective vulnerability detection.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Black Hat

Hey, Your Parcel Looks Bad - Fuzzing and Exploiting Parcelization Vulnerabilities in Android

Explore Android's Binder IPC vulnerabilities through fuzzing and exploitation techniques. Learn to identify, analyze, and exploit "BadParcel" issues for privilege escalation in high-privilege processes.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Black Hat

FlowFuzz - A Framework for Fuzzing OpenFlow-Enabled Software and Hardware Switches

Explore FlowFuzz, a fuzzing framework for SDN switches using OpenFlow protocol. Learn about testing and securing software-defined networking infrastructure.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Black Hat

Heap Layout Optimisation for Exploitation

Automatic approach to heap layout optimisation for exploitation using pseudo-random search over allocator interactions, with applications to real-world programs and vulnerability targeting.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Black Hat

Quantifying Risk in Consumer Software at Scale - Consumer Reports' Digital Standard

Explore methodologies for quantifying software security risks, predicting vulnerabilities, and evaluating consumer products using the Digital Standard developed by Consumer Reports and CITL.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk