nullcon Talks & Presentations

nullcon

Introduction to the OWASP ModSecurity Core Rule Set

Learn about OWASP ModSecurity Core Rule Set, a powerful open-source web application firewall. Discover key features like paranoia levels and anomaly scoring, and see its effectiveness in protecting against various attacks.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

nullcon

Jailbreaking the AppleTV3 - Tales From A Full Stack Hack

Explore the full stack hack of AppleTV3, uncovering vulnerabilities and jailbreaking techniques. Learn tricks for attacking restricted devices and gain insights into iOS security.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

nullcon

Hunting Evasive Vulnerabilities - Finding Flaws That Others Miss

Explore techniques for uncovering elusive web vulnerabilities, from advanced methods to overlooked basics. Learn strategies to enhance your security auditing skills and find flaws others miss.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

nullcon

What is Cyber Threat Intelligence

Discover cyber threat intelligence essentials, including analyst skills, frameworks, daily tasks, and maintaining anonymity. Learn to put intelligence into action for effective cybersecurity.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

nullcon

macOS Security Features Bypasses by Example

Explore macOS security features, vulnerabilities, and bypass techniques with a Microsoft security expert. Gain insights into SIP, TCC, and potential exploit avenues for researchers and professionals.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

nullcon

Impact of Log4j

Explore the impact of log4j vulnerability, its industry-wide effects, and strategies for mitigating similar threats in 2022 with experts Alvaro Munoz and Joe Slowik.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

nullcon

Bhadra Framework - Threat Modeling for Mobile Communication Systems

Explore the Bhadra framework for threat modeling in mobile communication systems, addressing complex security challenges and providing a structured approach to analyze adversarial behaviors in telecom networks.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

nullcon

Ransomware Unlocked

Comprehensive overview of ransomware, including history, current attacks, hacker groups, and defense strategies. Explores cyber security frameworks and principles for effective recovery and protection.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

nullcon

The Crash Course - A Non-Programmer's Guide to Fuzzing

Hands-on workshop for non-programmers to learn fuzzing techniques. Covers environment setup, tools like AFL and Honggfuzz, instrumentation, input selection, and crash analysis. Suitable for beginners to intermediate level.

• YouTube
• 2 hours 20 minutes
• On-Demand
• Conference Talk

nullcon

Migrate Securely from On Prem to Azure Cloud

Learn strategies for secure migration from on-premise to Azure Cloud, focusing on real-time scenarios, architecture design considerations, and Azure services for seamless transition while addressing security challenges.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

nullcon

From Reactive to Proactive - Operationalizing Your Threat Intel

Cybersecurity experts discuss operationalizing threat intelligence, moving from reactive to proactive approaches, and addressing challenges in cloud adoption and workforce training for enhanced security.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

nullcon

Deep Dive into ART - Android Runtime for Dynamic Binary Analysis

Explore Android Runtime's evolution, optimization techniques, and structure. Learn to analyze apps by modifying ART to extract real-time information and develop effective analysis techniques without code access.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

nullcon

An Azure Sphere Security Breakdown

Explore Azure Sphere IoT security features, vulnerabilities discovered during Microsoft's research challenge, and a privilege escalation chain for acquiring Azure Sphere Capabilities.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

nullcon

Telecom Security Challenges in 5G

Explore 5G telecom security challenges, improvements, and implementation issues. Learn about virtualization risks, DDOS threats, and industry initiatives like NESAS in this comprehensive overview.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

nullcon

Security Research and Disclosure - The Unauthorized Biography

Explore the evolution of security research and disclosure, from historical "unbreakable locks" to modern challenges in IoT, blockchain, and AI, with insights on ethical hacking and vulnerability reporting.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk