Vulnerability Analysis Courses and Certifications

Container Infrastructure Analysis with Trivy

In this cyber security course you will learn how to find vulnerabilities in Docker images and how to prevent these vulnerabilities from occurring in the first place.

• Pluralsight
• 50 minutes
• On-Demand
• Free Trial Available

Bill Buchanan OBE

Vulnerability Analysis and Penetration Testing Lab - DMZ Setup and Scanning

Hands-on lab exploring vulnerability analysis and penetration testing techniques, covering network scanning, fingerprinting, and security tool usage for identifying system weaknesses.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Learn to exploit and mitigate the critical Spring4Shell vulnerability. Gain hands-on experience in a secure lab environment, understand its significance, and communicate effectively with stakeholders.

• Cybrary
• On-Demand
• Paid Course

OWASP Foundation

How to Find the Next Great Deserialization CVE - AppSecUSA 2016

Explore deserialization attacks, learn to find and exploit vulnerabilities, and discover open-source protection methods. Gain insights into the challenges of traditional AppSec defenses against these threats.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Vulnerability Management for CySA+

Keeping your organization safe from attackers is essential. This course will teach you about vulnerability analysis needed for the CYSA+ Exam.

• Pluralsight
• 1 hour 31 minutes
• On-Demand
• Free Trial Available

IEEE

Security of GPS - INS Based On-Road Location Tracking Systems

Explores vulnerabilities in GPS/INS location tracking for road transport, demonstrating how adversaries can spoof routes to reach alternate destinations undetected. Proposes countermeasures to enhance system security.

• YouTube
• 19 minutes
• On-Demand
• Free Video

IEEE

Complex Paths and Derelict Sentinels - Software Engineering Underpinnings of NTP Vulnerabilities

Explore software engineering choices behind recent NTP vulnerabilities, focusing on packet consistency checks, ephemeral associations, and spoofing in this IEEE conference talk.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Bugcrowd

Log4Shell Vulnerability - Bugcrowd Security Flash

Explore the critical Log4Shell vulnerability, its impact, and mitigation strategies in this concise security briefing from Bugcrowd's expert.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Getting Started with Security Command Center Enterprise

Comprehensive overview of Google Cloud Security Command Center Enterprise, covering threat detection, vulnerability management, and case management for multi-cloud environments.

• Google Cloud Skills Boost
• 4 hours
• On-Demand
• Paid Course

NDC Conferences

Finding a Three 0-Day Exploit Chain in Ivanti EPMM and Ivanti Sentry

Detailed analysis of three critical 0-day vulnerabilities discovered in Ivanti EPMM and Sentry, including authentication bypasses and arbitrary file write. Explores the exploit chain and its real-world impact.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Bypassing Many Kernel Protections Using Elastic Objects

Explore advanced techniques for bypassing kernel protections through elastic objects, presented by Ph.D. students Yueqi Chen and Zhepeng Lin.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Triaging Kernel Out-of-Bounds Write Vulnerabilities

Explore techniques for triaging kernel out-of-bounds write vulnerabilities, including symbolic execution, capability summarization, and exploitability evaluation.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Fuzzing_in - Hardik Shah

Understanding, Replicating, and Generating PCAP for OpenSSH XZ Utils Backdoor Issue (CVE-2024-3094)

Explore CVE-2024-3094: Understand the xz library vulnerability, replicate it in a controlled environment, and generate PCAPs for analysis. Enhance your cybersecurity skills.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Strange Loop Conference

Using Data-Driven Metrics to Anticipate and Prevent Security Incidents

Learn how GitHub's PSIRT Engineering team uses data-driven metrics and variant analysis to anticipate and prevent security incidents, reducing pressure on incident response and enhancing product security.

• YouTube
• 36 minutes
• On-Demand
• Free Video

OWASP Foundation

Discovering Shadow Vulnerabilities in Popular Open-Source Projects - A Journey Through Reverse-Fuzzing

Explore hidden vulnerabilities in open-source libraries, their impact on high-profile projects, and the challenges of detection and mitigation. Learn about "Shadow Vulnerabilities" and their implications for software security.

• YouTube
• 30 minutes
• On-Demand
• Free Video