Attack Surface Analysis Courses and Certifications

Assets, Threats, and Vulnerabilities

1992 ratings at Coursera

Explore cybersecurity with Google's 4-week course. Learn about assets, threats, vulnerabilities, and security controls. Develop an attacker mindset and prepare for entry-level cybersecurity roles. No prior experience needed.

• Coursera
• 1 day 2 hours 5 minutes
• On-Demand
• Free Online Course (Audit)

Cisco Certified CyberOps Associate (200-201) Cert Prep: 2 Security Monitoring

15 ratings at LinkedIn Learning

Explore the principles of defense in depth as you prepare for the Security Monitoring portion of the Cisco Cybersecurity Operations Fundamentals (CBROPS) exam.

• LinkedIn Learning
• 2-3 hours
• On-Demand
• Free Trial Available

Black Hat

PMFault - Voltage Fault Injection on Server Platforms Through the PMBus

Explore hardware-based attacks and voltage fault injection on server platforms with Black Hat. Learn about PMBus, a widely used power monitoring tool, in under an hour.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Hacking Identity - A Pen Tester's Guide to IAM - Jerod Brennen

Explore the intricacies of Identity and Access Management (IAM) through a pen tester's lens, focusing on attack surfaces and defense strategies. Duration: 1h 2m.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

USENIX

Attacks are Forwarded - Breaking the Isolation of MicroVM-based Containers Through Operation Forwarding

Explore microVM container security flaws and defense strategies with USENIX in a concise 14-minute session.

• YouTube
• 14 minutes
• On-Demand
• Conference Talk

Burp Suite - Basic Concepts for Web Pentesting

Master web application security testing with Burp Suite in this 1-2 hour online program. Learn to map, analyze, and exploit security vulnerabilities for a more effective and efficient pentesting process.

• YouTube
• 1 hour 30 minutes
• On-Demand
• Free Online Course

NahamSec

Finding 0days in Enterprise Web Applications

Explore offensive security with NahamSec's under 1-hour material, focusing on finding 0days in enterprise web applications. Learn from live sessions every Sunday on Twitch.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

WEareTROOPERS

Old New Things - An Examination of the Philips TriMedia Architecture

Explore the Philips TriMedia architecture in less than an hour with WEareTROOPERS. Dive into firmware analysis, hardware exploration, and learn about the TriMedia ASM & Instruction set.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

NahamSec

Scaling Up - Automated Attack Surface Discovery with Intrigue Core

Learn automated attack surface discovery with Intrigue Core in less than an hour with NahamSec, including live sessions on Twitch.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Black Hat

BLEEDINGBIT - Your APs Belong to Us

Explore BLEEDINGBIT, two zero-day vulnerabilities in Texas Instruments' BLE chips, in a less than 1-hour talk by Black Hat. Learn how unauthenticated attackers can penetrate enterprise networks.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Recon Conference

Subverting Your Server Through Its BMC - The HPE iLO4 Case

Learn to subvert servers through BMC with HPE iLO4, covering firmware unpacking, vulnerability discovery, and exploitation techniques. Offered by Recon Conference.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

LASCON

Building an AppSec Program from the Ground Up - An Honest Retrospective

Learn from a 2-year journey of starting an appsec program at a small-medium company, with LASCON's honest retrospective, covering successes, failures, and goal-setting.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

LASCON

Simplifying Threat Modeling

Learn to simplify threat modeling with Mike Ware from Cigital in less than an hour, covering attack anatomy, threat traceability, and mitigation strategies. Offered by LASCON.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Rawr - Rapid Assessment of Web Resources

Learn rapid web resource assessment with DerbyCon's 47-minute session, covering scenarios, information gathering, and reporting. Includes demos and challenges.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Fuzzing File System Implementations to Uncover Security Bugs

Explore vulnerability research and fuzz-testing with Hack In The Box Security Conference. Learn to uncover security bugs in file systems, develop countermeasures, and automate the process.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk