Hack In The Box Security Conference Courses

I Own Your Building - Management System

1 review

Explore vulnerabilities in Building Management Systems, their impact on critical facilities, and the research process behind discovering these security flaws in various BMS components and products.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

API Security in the Age of Microservices

1 review

Explore API security challenges in microservices architectures and learn strategies for distributed security, including gateways, service mesh, authentication, and network segmentation.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Blockchain - The New Line Of Defense

1 review

Explore blockchain technology as a cutting-edge defense mechanism in cybersecurity, examining its potential applications and impact on digital security strategies.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

CTF Prize Giving & Closing Note

Prize giving ceremony and closing remarks for the HITB2023AMS Capture The Flag competition, highlighting achievements and concluding the event.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

The Hand That Strikes, Also Blocks

Exploring the interplay between cybersecurity attacks and defenses, this talk examines evolving strategies, stakeholder mindsets, and proactive approaches for a more secure digital future.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Investigating Web3 With OSINT

Explore Web3 fundamentals, including blockchain transactions, technology stack, token standards, and security risks, using OSINT techniques and free online tools.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

An Analysis of Computer Numerical Control Machines in Industry 4.0

Explores security risks in modern CNC machines, demonstrating practical attacks and discussing mitigation strategies for Industry 4.0 vulnerabilities in manufacturing environments.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Privilege Escalation Using DOP in MacOS

Explore privilege escalation in MacOS using Data-Oriented Programming (DOP), a powerful exploit technique that leverages heap buffer overflow vulnerabilities for persistent attacks resistant to kernel code changes.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

A Deep Dive Into GarminOS And Its MonkeyC Virtual Machine

Explore GarminOS and MonkeyC VM, uncovering critical vulnerabilities in Garmin devices. Learn about reverse engineering, virtual machine internals, and exploiting low-level security flaws in smart fitness technology.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Active Directory Abuse Primitives and Operation Security

Comprehensive exploration of Active Directory attack techniques, demonstrating real-world abuse primitives and attack paths. Includes practical demonstrations and operational guidance for both offensive and defensive perspectives.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Smart Speaker Shenanigans - Making the SONOS One Sing

Exploring ARM Trusted Firmware, secure boot, and encryption vulnerabilities in smart devices. Demonstrates exploits on Lenovo clock and SONOS One, revealing secrets and breaking security boundaries.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Exploiting IPC With New Desynchronization Primitives

Exploración de vulnerabilidades críticas en SAP, demostrando técnicas avanzadas de explotación HTTP y desincronización para comprometer sistemas empresariales. Incluye demostraciones prácticas y análisis de impacto en la seguridad global.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

ChatGPT Please Write Me A Piece of Polymorphic Malware

Explore how ChatGPT can be used to create advanced polymorphic malware, discussing the challenges, implementation techniques, and potential threats posed by AI-generated malicious software.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Automated Black-box Security Testing of Smart Embedded Devices

Innovative approach for IoT black-box fuzzing using "fuzzing triggers" from companion apps to generate optimal inputs, overcoming limitations of existing tools and discovering zero-day vulnerabilities.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

How MySQL Servers Can Attack YOU

Novel attack vector using compromised MySQL servers to target clients, demonstrating remote code execution vulnerabilities in MySQL tools and libraries, including a zero-day exploit bypassing security patches.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk