NahamCon Talks & Presentations

NahamSec

Going Beyond Microsoft IIS Short File Name Disclosure

Exploring advanced techniques for exploiting Microsoft IIS short file name disclosure vulnerabilities, with insights on enhancing web application security and ethical hacking strategies.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

NahamSec

PCI DSS or PCI DISS?

Explore PCI DSS compliance challenges and solutions in this informative talk. Gain insights into common issues, best practices, and strategies for effective implementation in your organization's payment card security.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NahamSec

Bugs Exposed - Unveiling Effective Strategies for Bug Bounty Programs

Unveiling effective strategies for bug bounty programs, including common misconceptions, examples, and techniques like back matrixing to maximize success in the first 30 minutes.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

NahamSec

Forager - New Insights Into Leaked Secrets

Explore new insights into leaked secrets with Forager, a tool for uncovering sensitive information. Learn about its capabilities and implications for cybersecurity and ethical hacking.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

NahamSec

Hacking Root EPP Servers to Take Control of Zones

Explore techniques for hacking root EPP servers to gain control of DNS zones. Learn about vulnerabilities in domain registry systems and potential impact on internet infrastructure.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

NahamSec

Securing Open Source Dependencies - It’s Not Just Your Code That You Need to Secure

Explore strategies for securing open-source dependencies in software development, emphasizing the importance of comprehensive security beyond just your own code.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

NahamSec

Context + Questions - How GPT-based AI Will Disrupt Security

Exploring the impact of GPT-based AI on security, this talk discusses potential disruptions, challenges, and opportunities in the cybersecurity landscape as AI technology advances.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

NahamSec

The Power of Shodan - Leveraging Shodan for Critical Vulnerabilities

Explore Shodan's capabilities for identifying critical vulnerabilities in systems. Learn effective techniques to leverage this powerful search engine for enhanced cybersecurity and vulnerability assessment.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

NahamSec

How to Properly Own APIs for Your First Valid Submission

Learn effective techniques for exploiting APIs to secure your first valid bug bounty submission, focusing on practical strategies and insider tips for successful API hacking.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

NahamSec

Reversing Web Assembly

Explore techniques for reversing Web Assembly (wasm) in this offensive security talk. Learn key strategies and tools for analyzing and understanding wasm code.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

NahamSec

Blackbox Monitoring for Timely Bug Detection

Discover effective blackbox monitoring techniques for timely bug detection in web applications. Learn task-based hybrid approaches, freshness indicators, and risk markers for improved security.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

NahamSec

Continuous Intrusion - Hacking CI Systems

Explore techniques for exploiting vulnerabilities in Continuous Integration systems, focusing on security risks and potential attack vectors in the software development pipeline.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NahamSec

Breaking Into Cloud Wallets - Hacking Crypto Web Apps

Explore cloud wallet vulnerabilities and crypto web app hacking techniques in this talk by @samwcyo, covering blind XSS, SQL injection, and account takeovers in the cryptocurrency ecosystem.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NahamSec

Effectively Finding Vulnerabilities by Debugging the Source Code

Discover effective techniques for identifying vulnerabilities through source code debugging. Learn to enhance your bug hunting skills and improve your ability to find security flaws in software.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

NahamSec

Recon Fundamentals by Example

Explore recon fundamentals through practical examples in this offensive security talk. Learn essential techniques for effective reconnaissance in bug bounty and penetration testing.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk