Hack In The Box Security Conference Courses

Hack In The Box Security Conference

#HITBCW2021 D1 - From A Workplace To A Workforce - Ofir Arkin

Syllabus: Introduction Working from home Security models Security models failed Other problems Focus on data Connect dots Endpoint Airport Security Model Profiling TSA Pre Outro

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D2 - A Retro- And Introspective Of The State Of Cyber - Roger Sels

Syllabus: Intro Cybersecurity & loT Market Drivers Cyber Chaos THE TENSION BETWEEN SECURITY AND PRODUCTIVITY The past approach is unsustainable Headline Obsession Spend =/= Effectiveness Talent shortage? Serial Construction Talent Retention Innovation? B…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D2 - Knockin' On MediaTek ADSP’s Door - Slava Makkaveev

Syllabus: Introduction Research Goal Research Methodology Test PC Code EP Message Memory Kernel Lock Android to Audio DSP Create Audio EP Message Research Audio DSP Image RAM Partition Tensilic Extensions Disassembly Object Dump Audio Tasks Android Kerne…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D2 - Response Smuggling: Pwning HTTP/1.1 Connections - Martin Doyhenard

Syllabus: Introduction Agenda What is Response Smuggling Connection Headers Exploits Request Smuggling Desynchronization Synchronization Attack Synchronization Attack Example Demo Cache Control Demo In Real Systems Video Demo New Response Conclusions Que…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D2 - Who Littered The Sandbox? Scooping Up New Malware Behavior - Olaf Hartong

Syllabus: Intro ZDN article Rebranding Marketing Spaghetti Picture Microsoft Sentinel Parsers Why do I do this Mimetypes dlls More groups Com Com Objects dll register What can they do Detection Questions

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D2 - Rage Against The Machine Clear - Enrico Barberis & Hany Ragab

Syllabus: Intro Side Channels 101 Bad Speculation Rage Against The Machine Clear Security Analysis of Machine Clear Self-Modifying Code Machine Clear Speculative Code Store Bypass (SCSB) Memory Ordering Machine Clear Floating-Point Machine Clear 3. Memor…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D2 - Software Security Analysis: Present And Future Research Initiatives - Sanjay Rawat

Syllabus: Intro About the Talk Take Away Vulnerability Research Attack Mitigation techniques Self-Healing (automated patching) Program comprehension from its security properties standpoint Program Analysis for complex (large) applications Program analysi…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D2 - MIPS-X: The Next IoT Frontier - Patrick Ross & Zoltan Balazs

Syllabus: Introduction Patrick Ross Why should you listen Why are we doing this Vulnerability research and exploit development Whats on the internet CPU Architectures CPU Architecture Differences Virtualization Emulation Building Your Own Kernel Errors C…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D1 - Low Level BootROM Protocol Fuzzing Secure Memory Regions - Sulthan Alaudee

Syllabus: Intro Microcontroller BootROM Functions BootROM Security Functions What different vendor provide Microcontroller Use cases Microcontroller Peripherals API's Less focus on Microcontroller Fuzzing? Need for fuzzing low level Protocols in Mc Fuzzi…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D1 - Attack Scenarios Abusing Azure Active Directory - Bill Ben Haim & Zur Ulianitzky

Syllabus: Intro Resources Resource Group Management Groups Architecture Example Azure Resource Manager Role Based Access Control (RBAC) Azure Active Directory (AAD) Fundamentals Application API Access Applications & Service Principals Authentication Azur…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D1 - 5G Cyber Security Challenges And Solution - Hulk Zhang

Syllabus: Intro Key Security Challenges of SG Networks Business Changes and Security Challenges Network Changes and Security Challenges Technological Changes and Security Challenges SG Network Threats Analysis 56 Enhances Network Security Capabilities Ba…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D1 - Modern Post Exploitation: The Ghost In The Cloud - Gal Diskin

Syllabus: Intro Once upon a time SCIM provisioning Real World Example Automating access - ABAC How to analyze a new app you need to target Example analyzing GitHub IAM Gadgets - Hiding access IAM Gadgets - Exfiltration Let's enumerate the access Self Ser…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D1 - Malicious Contracts - Kyprianos Vasilopoulos and Christian Papathansiou

Syllabus: Intro INTRODUCTION WHAT IS THEREUM WHAT IS A SMART CONTRACT WHAT IS A ROOTKIT ROOTKIT ATTRIBUTION PROBLEMS FOR ATTACKERS 6. USING SMART CONTRACTS FOR ROOTKIT CZ DEMO

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITBCW2021 D1 - Electro-optical Sound Eavesdropping - Ben Nassi

Syllabus: Intro What is sound eavesdropping Internal and external methods Electro optical sound eavesdropping Lamphon Experiment Results Experiment setup Baseline Optical Measurements NonSpeech Audio Speech Audio Conclusion Glom Attack Analysis Which dev…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Hack In The Box Security Conference

#HITB2021SIN D2T2 - trapfuzzer: Coverage-guided Binary Fuzzing with Breakpoints - Sili Luo

Syllabus: Intro What is Fuzzing? What is Coverage-Guided Fuzzing? Background Inspiration Overview binary patcher - basic-block-info-file example binary patcher - example Seed Mutation Fuzzer Module - Corpus Distillation Trace module - Theory Lets Fuzz WP…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course