Remote Code Execution Courses and Certifications

Black Hat

LLM4Shell - Discovering and Exploiting RCE Vulnerabilities in LLM-Integrated Frameworks

Uncover critical RCE vulnerabilities in LLM-integrated frameworks and apps. Learn automated exploitation methods, potential impacts, and essential mitigation strategies for securing AI-powered systems.

• YouTube
• 36 minutes
• On-Demand
• Free Video

DEFCONConference

Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana

Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Exposing Critical Threats in Cellular Modem Security - Telit Vulnerabilities Analysis

Uncover critical security vulnerabilities in Telit cellular modems, including remote code execution flaws, SMS-based attacks, and MIDlet compromise methods that affect millions of connected devices.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

Advanced Server-Side Template Exploitation with RCE Everywhere - 2024

Discover novel techniques for exploiting server-side template injections, focusing on complex payloads and RCE methods without quotation marks or plugins for enhanced security testing.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

From Survey.js to Remote Code Execution in Meta

Descubre el proceso de identificación y explotación de una vulnerabilidad de carga de archivos sin restricciones en Meta, desde la búsqueda inicial hasta lograr RCE y el proceso de reporte exitoso.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Ethical Hacking & Bug Hunting: Buffer Overflow For Beginners

558 ratings at Udemy

Learn how to exploit Buffer Overflows on Windows systems. Get a shell! (Reverse engineering and Exploit development).

• Udemy
• 1 hour 25 minutes
• On-Demand
• Paid Course

Ethical Hacking/Penetration Testing & Bug Bounty Hunting v2

496 ratings at Udemy

Complete Practical Course on Ethical Hacking, Penetration Testing and Bug Bounty Hunting with Live Attacks

• Udemy
• 10 hours 20 minutes
• On-Demand
• Paid Course

OWASP Top 10: Comprehensive Web Application Security

471 ratings at Udemy

Master OWASP vulnerabilites and Hacking Techniques : SQL injection, XSS, CSRF, RCE, XEE, Broken Authentication, and more

• Udemy
• 1 hour 42 minutes
• On-Demand
• Paid Course

Mastering Command Injection - The Ultimate Hands-On Course

176 ratings at Udemy

How to Find, Exploit and Defend Against Command Injection Vulnerabilities. For Ethical Hackers, Developers & Pentesters

• Udemy
• 2 hours 9 minutes
• On-Demand
• Paid Course

Infosec Microcredential

JavaScript Security

Comprehensive exploration of JavaScript security, covering front-end and Node.js. Learn to identify, prevent, and resolve attacks while building safer applications across various platforms.

• Coursera
• 13 weeks, 1 hour a week
• On-Demand
• Paid Course
• 4 courses

Complete Web Application Offensive Hacking Course:Pro Hacker

16 ratings at Udemy

An Excellent Practical Course to Ethical Web Hacking. Become a successful Pen tester, Bug bounty Hunter and Pro Hacker.

• Udemy
• 7 hours 45 minutes
• On-Demand
• Paid Course

BurpSuite Extensions

Explore popular BurpSuite extensions for advanced web security testing, including Request Smuggler, Logger++, J2EEScan, and JWT Attacker, to enhance your hacking capabilities.

• YouTube
• 1 hour 30 minutes
• On-Demand
• Free Video

John Hammond

Custom Java Deserialization Exploit - Serial Snyker

Explore Java deserialization vulnerabilities and create custom exploits for remote code execution in this hands-on tutorial, featuring practical examples and step-by-step guidance.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Explore the critical Log4J vulnerability (CVE-2021-44228), learning to identify, exploit, and mitigate this high-impact security flaw in Apache's widely-used logging framework.

• Cybrary
• 1-2 hours
• On-Demand
• Paid Course

nullcon

ElectroVolt - Pwning Desktop Apps Built On Electron

Explore vulnerabilities in Electron-based desktop apps, including novel attack vectors for remote code execution, with demonstrations on popular applications like Discord and VSCode.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk