Fuzzing Courses and Certifications

Black Hat

Assessing and Exploiting BigNum Vulnerabilities

Explore vulnerabilities in multi-precision integer arithmetic used in cryptography implementations. Learn bug patterns, exploitation techniques, and strategies for automated vulnerability detection.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Cyber Mentor

Hacking APIs - Fuzzing 101

Learn API fuzzing techniques for penetration testing and security assessment, with hands-on lab demonstrating practical application and methodology.

• YouTube
• 13 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Hunting Windows Desktop Window Manager Bugs

Exploring Windows Desktop Window Manager vulnerabilities, focusing on DirectComposition UserSpace. Covers architecture, attack surfaces, and specific CVEs, offering insights into bug hunting techniques and security implications.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Syzbot and the Tale of Thousand Kernel Bugs

Explore Linux kernel bug detection tools and their impact on system security. Learn about syzbot, syzkaller, and sanitizers for improving kernel stability and reliability.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Making Fuzzing Part of Your Software Development Lifecycle

Learn to integrate fuzzing into software development, exploring tools like libFuzzer, ClusterFuzz, and OSS-Fuzz to enhance security and catch bugs early in open-source and proprietary projects.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Fuzzing Host-to-Guest Attack Surface in Android Protected KVM

Explore Android 13's Protected KVM security, focusing on guest device drivers' vulnerabilities. Learn about a fuzzing solution using Linux Kernel Library to identify and mitigate potential attack vectors.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Hacking for Developers

Learn ethical hacking techniques, tools, and methodologies to enhance your development skills and improve software security. Gain insights into vulnerability assessment and exploitation.

• YouTube
• 35 minutes
• On-Demand
• Free Video

KFLAT - Selective Kernel Memory Serialization for Security and Debugging

Explore KFLAT, a tool for fine-grained Linux kernel memory serialization, enhancing debugging and testing capabilities. Learn its implementation, benefits, and applications in kernel development.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Dealing with Uninitialized Memory in the Linux Kernel

Explore KMSAN's detection of uninitialized memory bugs in the Linux kernel, their security implications, and potential solutions through heap and stack initialization techniques.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Zephyr Project Security Status - Recent and Ongoing Work

Explore Zephyr Project's security initiatives, including best practices, static analysis, certifications, API design, and fuzzing. Learn about ongoing work and future goals for this open-source RTOS.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Hardening Linux for Confidential Cloud Computing - Deep Dive and Results

Explore techniques for hardening Linux guest systems in confidential cloud computing environments, focusing on security mechanisms, kernel subsystem treatments, and results from fuzzing and code audits.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Code Aware Services for Vulnerability Detection - Welcome Back and Remarks

Explore Code Aware Services for complex software security. Learn about build tracing, source code processing, and tools for vulnerability detection in large-scale projects like Android Linux kernel.

• YouTube
• 45 minutes
• On-Demand
• Free Video

ACRN Security: Fuzzing and Hardening Edge Hypervisors

Explore fuzzing techniques and security hardening for ACRN, an open-source hypervisor designed for edge computing and IoT devices, with insights on tools and methodologies.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Cooper

Bug Hunting Using Symbolic Virtual Machines - Hack.lu 2017

Explore symbolic execution for vulnerability discovery and reverse engineering. Learn KLEE symbolic virtual machine basics to solve complex challenges in software security.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Triaging Kernel Out-of-Bounds Write Vulnerabilities

Explore techniques for triaging kernel out-of-bounds write vulnerabilities, including symbolic execution, capability summarization, and exploitability evaluation.

• YouTube
• 29 minutes
• On-Demand
• Free Video