Remote Code Execution Courses and Certifications

nullcon

Careful Who You Trust - Compromising P2P Cameras At Scale

Explore vulnerabilities in P2P protocols used by smart cameras, including Kalay Platform analysis, device-specific exploits, and remote code execution demonstrations. Learn about IoT security risks and mitigation strategies.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

nullcon

Dangling Packages Leading to RCE

Explore dependency confusion attacks and how unclaimed packages in project files can lead to remote code execution. Learn about real-world vulnerabilities and mitigation strategies.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

nullcon

COMpromise - Remote Code Execution in Windows Development Environments

Explore how viewing untrusted code in Windows IDEs can lead to remote code execution through COM vulnerabilities, with practical exploit chains for Visual Studio demonstrated.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Recon Conference

Snow Crashing Virtual Reality - 2019 Edition

Exploring security flaws in VR games leading to remote code execution, highlighting privacy concerns and the need for developers to prevent abuse in online AR/VR communities.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

media.ccc.de

Messenger Hacking - Remotely Compromising an iPhone through iMessage

Detailed exploration of a remote iPhone exploit via iMessage, covering vulnerability analysis, exploitation techniques, and mitigation strategies for mobile OS and messenger security.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

media.ccc.de

From Zero to Zero Day

Journey from coding challenges to discovering a critical Edge browser vulnerability, with insights on JIT type confusion and browser exploitation.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

SecurityFWD

Bypassing Endpoint Controls Using Office Macros - Techniques and Defenses

Explore techniques for bypassing endpoint controls using Office macros, including crafting malicious documents, establishing C&C channels, and evading detection through advanced attack methods.

• YouTube
• 48 minutes
• On-Demand
• Free Video

SyScan360

Remote Code Execution via Java Native Deserialization

Explore Java deserialization vulnerabilities, focusing on remote code execution through XML and binary deserialization. Learn about CVEs, tools, and future research in this area.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Bypassing Microsoft Defender for Identity

Explore techniques to bypass Microsoft Defender for Identity, executing high-impact attacks across the kill chain while avoiding detection in on-premises Active Directory environments.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

media.ccc.de

Fuzzing the Phone in the iPhone

Explore iPhone baseband security through fuzzing, revealing vulnerabilities in iOS-baseband interface. Discover unexpected effects on device identity, SMS handling, and location services.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

media.ccc.de

Smart Vacuum Cleaners as Remote Wiretapping Devices - Easterhegg - 2019

Exploración de vulnerabilidades en aspiradoras inteligentes Neato Botvac Connected, incluyendo extracción de firmware y ejecución remota de código, con implicaciones para la privacidad y seguridad del hogar.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

DefCamp

How We Analyzed and Built an Exploit PoC for CVE-2022-24086, a Magento RCE - Catalin Filip - DefCamp - 2022

Explore the analysis and exploit development for CVE-2022-24086, a critical Magento RCE vulnerability, presented by a security researcher at DefCamp 2022.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Cooper

Snuffleupagus - Killing Bugclasses in PHP 7, Virtual-Patching the Rest

Explore Snuffleupagus, an open-source PHP security module that kills bug classes, implements virtual-patching, and enhances protection against vulnerabilities without modifying application code.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Black Hat

Finding New Bluetooth Low Energy Exploits via Reverse Engineering Multiple Vendors' Firmwares

Explore Bluetooth Low Energy vulnerabilities through firmware reverse engineering, uncovering remote code execution exploits at the protocol's lowest levels without authentication or pairing.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

nullcon

Contextomy - Let's Debug Together

Explore a critical iOS design flaw allowing remote code execution through debug session hijacking. Learn about the vulnerability's discovery, research, exploitation, and Apple's fix.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk