NahamCon Talks & Presentations

NahamSec

Reversing Web Assembly

Explore techniques for reversing Web Assembly (wasm) in this offensive security talk. Learn key strategies and tools for analyzing and understanding wasm code.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

NahamSec

Blackbox Monitoring for Timely Bug Detection

Discover effective blackbox monitoring techniques for timely bug detection in web applications. Learn task-based hybrid approaches, freshness indicators, and risk markers for improved security.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

NahamSec

Continuous Intrusion - Hacking CI Systems

Explore techniques for exploiting vulnerabilities in Continuous Integration systems, focusing on security risks and potential attack vectors in the software development pipeline.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

NahamSec

Breaking Into Cloud Wallets - Hacking Crypto Web Apps

Explore cloud wallet vulnerabilities and crypto web app hacking techniques in this talk by @samwcyo, covering blind XSS, SQL injection, and account takeovers in the cryptocurrency ecosystem.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NahamSec

Effectively Finding Vulnerabilities by Debugging the Source Code

Discover effective techniques for identifying vulnerabilities through source code debugging. Learn to enhance your bug hunting skills and improve your ability to find security flaws in software.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

NahamSec

Recon Fundamentals by Example

Explore recon fundamentals through practical examples in this offensive security talk. Learn essential techniques for effective reconnaissance in bug bounty and penetration testing.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

NahamSec

Finding 0days in Enterprise Web Applications

Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

NahamSec

The Bug Hunter's Methodology - Application Analysis v1

Comprehensive guide to application analysis for bug hunters, covering advanced techniques, tools, and methodologies to identify vulnerabilities and maximize bounty rewards.

• YouTube
• 1 hour 27 minutes
• On-Demand
• Conference Talk

NahamSec

Career and Community Building with Bug Bounties

Panel discussion on leveraging bug bounties for career growth, knowledge expansion, and community building in infosec. Experts share insights on how bug bounties have impacted their professional journeys.

• YouTube
• 1 hour 8 minutes
• On-Demand
• Conference Talk

NahamSec

Putting Your Mind to It - Bug Bounties for 12 Months

Insights into successful bug bounty hunting strategies and experiences over a 12-month period, focusing on mindset, persistence, and effective techniques for finding vulnerabilities.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

NahamSec

Hacking IIS

Explore advanced IIS hacking techniques, including HTTPAPI 2.0 assets, VHost hopping, local file disclosure, and complex XXE vectors. Learn to leverage tools like DNSpy for effective web application security testing.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

NahamSec

Learn to Hack - Choose a Target - Get a Bounty

Practical guide to overcoming initial challenges in bug bounty hunting, covering automation, reconnaissance, common vulnerabilities, and essential hacking skills for beginners.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

NahamSec

Just Give Me a Trial, Please

Overcoming obstacles in hacking enterprise software for bug bounty programs: experiences and advice on tackling third-party vendor products and obtaining trial access.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

NahamSec

Using Chromedp to Hunt for Prototype Pollution

Learn to use Chromedp in Go for detecting prototype pollution at scale, enhancing your ability to identify and address this client-side security vulnerability efficiently.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

NahamSec

A Heaven for Hackers - Breaking Web Security Virtual Appliance

Explore web security vulnerabilities and hacking techniques through hands-on demonstrations, focusing on methodology, enumeration, and exploitation of common weaknesses in web applications.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk