NahamCon Talks & Presentations

NahamSec

Attacking Wide Scopes

Explore techniques for attacking wide-scope targets in bug bounty programs. Learn strategies to identify vulnerabilities and maximize your impact when dealing with extensive attack surfaces.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

NahamSec

What I Learnt from a Year of Triaging Bug Bounty Reports

Insights from a year of triaging bug bounty reports, covering key lessons learned, common pitfalls, and effective strategies for successful vulnerability reporting and management.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk

NahamSec

Bug Bounty Platforms - Not Just for Hunting Anymore

Explore the similarities and differences between pentesting and bug bounty hunting, and learn how bug bounty experience can launch a career in pentesting. Gain insights from Phillip Wylie's expertise in cybersecurity.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

NahamSec

Amassive Leap in Host Discovery

Explore advanced techniques for integrating diverse data sources into the amass engine, enhancing its capabilities as a comprehensive reconnaissance tool for cybersecurity professionals.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

NahamSec

Why Do We Need A Hacker Community?

Panel discussion exploring the importance of hacker communities, featuring insights from industry experts on fostering collaboration, knowledge sharing, and growth within the cybersecurity field.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

NahamSec

Better Report Writing for Faster Triage Times

Insights on crafting effective bug reports for quicker triage, based on experience as a triager. Learn to improve your reporting skills and expedite the bug bounty process.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

NahamSec

JWT JKU and X5U Equals Love

Explore JWT vulnerabilities related to jku and x5u headers, understanding potential security risks and exploitation techniques in web applications.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

NahamSec

Reversing Web Assembly

Explore techniques for reversing Web Assembly (wasm) in this offensive security talk. Learn key strategies and tools for analyzing and understanding wasm code.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

NahamSec

Blackbox Monitoring for Timely Bug Detection

Discover effective blackbox monitoring techniques for timely bug detection in web applications. Learn task-based hybrid approaches, freshness indicators, and risk markers for improved security.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

NahamSec

Continuous Intrusion - Hacking CI Systems

Explore techniques for exploiting vulnerabilities in Continuous Integration systems, focusing on security risks and potential attack vectors in the software development pipeline.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NahamSec

Breaking Into Cloud Wallets - Hacking Crypto Web Apps

Explore cloud wallet vulnerabilities and crypto web app hacking techniques in this talk by @samwcyo, covering blind XSS, SQL injection, and account takeovers in the cryptocurrency ecosystem.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NahamSec

Effectively Finding Vulnerabilities by Debugging the Source Code

Discover effective techniques for identifying vulnerabilities through source code debugging. Learn to enhance your bug hunting skills and improve your ability to find security flaws in software.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

NahamSec

Recon Fundamentals by Example

Explore recon fundamentals through practical examples in this offensive security talk. Learn essential techniques for effective reconnaissance in bug bounty and penetration testing.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

NahamSec

Finding 0days in Enterprise Web Applications

Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NahamSec

The Bug Hunter's Methodology - Application Analysis v1

Comprehensive guide to application analysis for bug hunters, covering advanced techniques, tools, and methodologies to identify vulnerabilities and maximize bounty rewards.

• YouTube
• 1 hour 27 minutes
• On-Demand
• Conference Talk