Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Remote Code Execution

Showing: 120 courses
John Hammond

CVE-2021-44228 - Log4j - Minecraft Vulnerable and So Much More

0 rewiews
Comprehensive exploration of the Log4j vulnerability, including demonstrations of exploits in Minecraft, industry responses, and defensive strategies.
Add to list
13 Lesons
35 minutes
On-Demand
Free-Video

BurpSuite Extensions

0 rewiews
Explore popular BurpSuite extensions for advanced web security testing, including Request Smuggler, Logger++, J2EEScan, and JWT Attacker, to enhance your hacking capabilities.
Add to list
6 Lesons
1 hour 30 minutes
On-Demand
Free-Video
John Hammond

Custom Java Deserialization Exploit - Serial Snyker

0 rewiews
Explore Java deserialization vulnerabilities and create custom exploits for remote code execution in this hands-on tutorial, featuring practical examples and step-by-step guidance.
Add to list
14 Lesons
29 minutes
On-Demand
Free-Video
Ekoparty Security Conference

El Bug de la Semana - Remote Code Execution in CDNJS of Cloudflare

0 rewiews
Análisis detallado de una vulnerabilidad de ejecución remota de código en cdnjs de Cloudflare, con Joel Noguera. Exploración técnica y reflexiones sobre el impacto en la seguridad web.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Ekoparty Security Conference

A Journey Finding Pre and Post-Auth D-Link Router Zero-Days

0 rewiews
Explora el proceso de descubrimiento y explotación de vulnerabilidades 0-day en routers D-Link, desde obtener acceso al firmware hasta identificar y explotar fallos de seguridad para lograr ejecución remota de código.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
SecurityFWD

Bypassing Endpoint Controls Using Office Macros - Techniques and Defenses

0 rewiews
Explore techniques for bypassing endpoint controls using Office macros, including crafting malicious documents, establishing C&C channels, and evading detection through advanced attack methods.
Add to list
15 Lesons
48 minutes
On-Demand
Free-Video
Cyber Mentor

Solving the Pickle Rick CTF - Walkthrough and Techniques

0 rewiews
Step-by-step walkthrough of solving the Pickle Rick CTF challenge, covering scanning, enumeration, exploitation, and privilege escalation techniques for ethical hacking practice.
Add to list
9 Lesons
15 minutes
On-Demand
Free-Video
LASCON

Trusted Execution: A Deterministic Approach to AppSec for Zero-Day Threat Prevention - 2016

0 rewiews
Explore Trusted Execution, a novel approach to application security that promises zero-day threat prevention through granular memory-level visibility and context, eliminating false positives in advanced security threats.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
OWASP Foundation

Security Begins with Secure Development Environments

0 rewiews
Explore supply chain security threats in development environments, focusing on vulnerabilities in Visual Studio Code extensions and their potential for remote code execution.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
BSidesLV

Unveiling the Hidden - Discovering RDP Vulnerabilities Using PDF Files

0 rewiews
Innovative OSINT techniques reveal critical RDP vulnerabilities, including remote code execution and security bypasses, without conventional reverse engineering tools. Explore unconventional research methodologies and vulnerability analysis.
Add to list
1 Lesons
17 minutes
On-Demand
Free-Video
Recon Conference

Remotely Exploiting the ClamAV Antivirus Engine - CVE-2023-20032 Case Study

0 rewiews
Explore a case study on exploiting CVE-2023-20032 in ClamAV, demonstrating remote code execution and ASLR bypass techniques applicable to similar antivirus software vulnerabilities.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Exploiting the Lexmark PostScript Stack

0 rewiews
Explore Lexmark PostScript stack exploitation, covering internals, language basics, mitigations, and achieving remote code execution through out-of-bounds read and type confusion vulnerabilities.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
Cyber Mentor

How to Hack WordPress - Exploiting Plugins - Part 2

0 rewiews
Learn to exploit WordPress plugins through lab setup, enumeration techniques, and remote code execution in this hands-on cybersecurity tutorial.
Add to list
6 Lesons
14 minutes
On-Demand
Free-Video
Cyber Mentor

Learn to Hack Live - Remote Code Execution in WebApps

0 rewiews
Explore remote code execution vulnerabilities in web applications, enhancing your ethical hacking skills and understanding of cybersecurity threats.
Add to list
1 Lesons
2 hours 6 minutes
On-Demand
Free-Video
HackerSploit

Log4J Vulnerability (Log4Shell) - Exploitation and Mitigation

0 rewiews
Exploración detallada de la vulnerabilidad Log4Shell en Log4J, demostrando técnicas de explotación y mitigación en Apache Solr. Incluye explicación del impacto y gravedad de esta falla crítica de seguridad.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
OffensiveCon

Abusing Linux In-Kernel SMB Server to Gain Kernel Remote Code Execution

0 rewiews
Explore Linux kernel vulnerabilities and gain insights into exploiting the in-kernel SMB server for remote code execution.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
Black Hat

Escaping Modern Web-Based App Sandboxes - Site Isolation Vulnerabilities

0 rewiews
Explore Chrome's site isolation vulnerabilities in web-based apps, revealing how attackers can bypass security measures to execute malicious actions and compromise user data.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
NDC Conferences

Implicit and Mutation-Based Serialization Vulnerabilities in .NET

0 rewiews
Explores novel .NET serialization attacks bypassing current mitigations, demonstrating vulnerabilities in popular platforms and offering detection and mitigation techniques for developers.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Linux Foundation

The Critical Path to Implant Backdoors and Potential Mitigation Techniques: Learnings from XZ Utils

0 rewiews
Analyze the critical attack path of XZ Utils backdoor and explore mitigation strategies for supply-chain attacks in open-source software.
Add to list
1 Lesons
1 hour 9 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

ShellTorch - The Next Evolution in *4Shell Executions

0 rewiews
Uncover ShellTorch vulnerabilities in TorchServe, enabling remote code execution and AI model manipulation. Learn about the high-severity exploit's impact on PyTorch ecosystem and essential mitigation strategies.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
Black Hat

LLM4Shell - Discovering and Exploiting RCE Vulnerabilities in LLM-Integrated Frameworks

0 rewiews
Uncover critical RCE vulnerabilities in LLM-integrated frameworks and apps. Learn automated exploitation methods, potential impacts, and essential mitigation strategies for securing AI-powered systems.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
OffensiveCon

Half Measures and Full Compromise: Exploiting Microsoft Exchange PowerShell Remoting

0 rewiews
Explore Microsoft Exchange PowerShell Remoting vulnerabilities and exploitation techniques for enhanced cybersecurity awareness and defense strategies.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
OffensiveCon

One SMS to Root Them All: Exposing Critical Threats in Connected Devices

0 rewiews
Explore critical vulnerabilities in connected devices through SMS exploitation, uncovering potential threats to millions of users worldwide.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Unexpected Intrusion Testing Results in SAP Systems - Critical Vulnerabilities and Exploits

0 rewiews
Unveiling critical vulnerabilities in SAP Start Service, from local to remote exploits. Explores memory corruption and OS command injection leading to root-level RCE, with live demo and recommendations.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
Fuzzing_in - Hardik Shah

Microsoft Outlook CVE-2024-21413 Vulnerability - Protecting Your Credentials

0 rewiews
Explore the critical CVE-2024-21413 vulnerability in Microsoft Outlook, understanding its potential for credential compromise and remote code execution. Learn protective measures and stay informed.
Add to list
1 Lesons
13 minutes
On-Demand
Free-Video
Bugcrowd

AEM Hacker - Approaching Adobe Experience Manager Webapps in Bug Bounty Programs

0 rewiews
Explore techniques for hacking Adobe Experience Manager webapps, including misconfigurations, vulnerabilities, and automation tools. Learn methodologies for bug bounty programs targeting AEM deployments.
Add to list
52 Lesons
49 minutes
On-Demand
Free-Video
DEFCONConference

Breaching AWS Through Shadow Resources - Critical Vulnerabilities and Security Implications

0 rewiews
Uncover critical AWS vulnerabilities and security insights through real-world examples of shadow resource exploitation, featuring detection methods, privilege escalation techniques, and best practices for cloud security.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
OWASP Foundation

Serverless Infections - Malware in Serverless Computing Environments

0 rewiews
Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
OWASP Foundation

Attacking JSON - Vulnerabilities in Popular Parsers

0 rewiews
Explore JSON parser vulnerabilities in .NET and Java, including RCE risks. Learn about attack techniques, vulnerable formats, and mitigation strategies for safer serialization implementations.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
OWASP Foundation

Hacking Web Server Apps for iOS - Security Risks and Vulnerabilities

0 rewiews
Explore iOS web server app vulnerabilities, from XSS to potential RCE. Learn risks, attack vectors, and implications for both jailbroken and non-jailbroken devices in this eye-opening security analysis.
Add to list
20 Lesons
31 minutes
On-Demand
Free-Video
BSidesLV

My Terrible Roommates - Discovering the FlowFixation Vulnerability and the Risks of Sharing a Cloud Domain

0 rewiews
Unveiling FlowFixation: High-severity cloud vulnerability affecting shared domains. Explore risks, prevention methods, and the importance of the public suffix list in cloud security.
Add to list
1 Lesons
17 minutes
On-Demand
Free-Video
nullcon

Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS

0 rewiews
Explore macOS IPC security, focusing on Mach message handlers. Learn about custom fuzzing techniques to uncover vulnerabilities in privileged RPC-like functions, potentially leading to sandbox escapes and privilege escalations.
Add to list
1 Lesons
53 minutes
On-Demand
Free-Video
Fuzzing_in - Hardik Shah

Exploiting Jenkins CVE-2024-23897 - Remote Code Execution Step-by-Step Tutorial

0 rewiews
Learn to replicate Jenkins Remote Code Execution vulnerability CVE-2024-23897. Set up Vulhub, use Nuclei template, and exploit the flaw step-by-step for educational purposes in cybersecurity.
Add to list
1 Lesons
11 minutes
On-Demand
Free-Video
LASCON

Scanning IPv4 for Exposed Data and Vulnerable Databases

0 rewiews
Exploring IPv4 scans to uncover exposed databases, revealing vulnerabilities in popular key-value stores and the risks of data theft and remote code execution in insecure setups.
Add to list
31 Lesons
44 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Hands-on Hacking Kubernetes and Ways to Prevent It

0 rewiews
Hands-on workshop exploring Kubernetes vulnerabilities and prevention strategies. Demonstrates remote code execution exploit and teaches mitigation techniques for enhanced container security.
Add to list
1 Lesons
1 hour 13 minutes
On-Demand
Free-Video
Docker

Hardening Against Kubernetes Hacks - Live Demo

0 rewiews
Explore a real-world Kubernetes cluster takeover through remote code execution, and learn effective mitigation strategies to enhance your system's security against such threats.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Shadow Vulnerabilities in AI/ML Data Stacks - What You Don't Know Can Hurt You

0 rewiews
Explore hidden security risks in AI/ML data stacks, focusing on open-source vulnerabilities, RCE issues, and security anti-patterns. Learn about new checkpoint formats and runtime-based detection methods using eBPF.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

ICEFALL - Revisiting A Decade Of OT Insecure-By-Design Practices

0 rewiews
Revisiting insecure-by-design practices in OT devices, highlighting persistent security issues across industries and critical infrastructure, with technical deep-dives and implications for risk management.
Add to list
15 Lesons
58 minutes
On-Demand
Free-Video
Recon Conference

Snow Crashing Virtual Reality - 2019 Edition

0 rewiews
Exploring security flaws in VR games leading to remote code execution, highlighting privacy concerns and the need for developers to prevent abuse in online AR/VR communities.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
nullcon

ElectroVolt - Pwning Desktop Apps Built On Electron

0 rewiews
Explore vulnerabilities in Electron-based desktop apps, including novel attack vectors for remote code execution, with demonstrations on popular applications like Discord and VSCode.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
nullcon

Careful Who You Trust - Compromising P2P Cameras At Scale

0 rewiews
Explore vulnerabilities in P2P protocols used by smart cameras, including Kalay Platform analysis, device-specific exploits, and remote code execution demonstrations. Learn about IoT security risks and mitigation strategies.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
nullcon

Dangling Packages Leading to RCE

0 rewiews
Explore dependency confusion attacks and how unclaimed packages in project files can lead to remote code execution. Learn about real-world vulnerabilities and mitigation strategies.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
nullcon

COMpromise - Remote Code Execution in Windows Development Environments

0 rewiews
Explore how viewing untrusted code in Windows IDEs can lead to remote code execution through COM vulnerabilities, with practical exploit chains for Visual Studio demonstrated.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
Ekoparty Security Conference

The Unbearable Lightness of BMCs

0 rewiews
Explora vulnerabilidades críticas en dispositivos de gestión remota de centros de datos, revelando riesgos de ejecución de código y movimiento lateral entre servidores y BMCs.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Ruler - From Exchange to DA

0 rewiews
Exploración de vulnerabilidades en Microsoft Exchange y Outlook, demostrando nuevos vectores de ataque y ejecución de código remoto a través de VBScript payloads indetectables.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
Ekoparty Security Conference

SAP HANA Under the Hood - Attacks and Countermeasures

0 rewiews
Exploración de vulnerabilidades y ataques a SAP HANA, incluyendo XSS y ejecución remota de código. Aprende a prevenir y detectar amenazas en sistemas SAP para proteger información crítica empresarial.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Serverless Security - Attack & Defense

0 rewiews
Explore serverless security vulnerabilities, attack techniques, and defense strategies through live demos, covering NPM package exploits, RCE, privilege escalation, and insecure defaults in serverless frameworks.
Add to list
1 Lesons
53 minutes
On-Demand
Free-Video
nullcon

The Silent Spy Among Us - Modern Attacks Against Smart Intercoms

0 rewiews
Explore vulnerabilities in smart cloud-based intercoms, including remote code execution and unauthorized access to video streams. Learn about VOIP protocols and security implications in modern intercom systems.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
media.ccc.de

From Zero to Zero Day

0 rewiews
Journey from coding challenges to discovering a critical Edge browser vulnerability, with insights on JIT type confusion and browser exploitation.
Add to list
12 Lesons
48 minutes
On-Demand
Free-Video
media.ccc.de

Messenger Hacking - Remotely Compromising an iPhone through iMessage

0 rewiews
Detailed exploration of a remote iPhone exploit via iMessage, covering vulnerability analysis, exploitation techniques, and mitigation strategies for mobile OS and messenger security.
Add to list
1 Lesons
1 hour 2 minutes
On-Demand
Free-Video
Security BSides San Francisco

Blue Team Fundamentals

0 rewiews
Explore effective strategies to counter common cyber attacks, including credential stuffing, phishing, and RCE attempts, with practical takeaways to enhance your organization's security posture.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
Security BSides San Francisco

Abusing WCF Endpoint for RCE and Privilege Escalation

0 rewiews
Explore WCF vulnerabilities in .NET programs, focusing on privilege escalation and remote code execution. Learn to identify and exploit these bugs through a real-world case study.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
NorthSec

Repo Jacking - How Github Usernames Expose Projects to RCE

0 rewiews
Explore 'repo jacking', a widespread supply chain vulnerability affecting 70,000+ open-source projects. Learn its causes, exploitation methods, and mitigation strategies to protect your GitHub-dependent projects.
Add to list
14 Lesons
25 minutes
On-Demand
Free-Video
DefCamp

How We Analyzed and Built an Exploit PoC for CVE-2022-24086, a Magento RCE - Catalin Filip - DefCamp - 2022

0 rewiews
Explore the analysis and exploit development for CVE-2022-24086, a critical Magento RCE vulnerability, presented by a security researcher at DefCamp 2022.
Add to list
6 Lesons
25 minutes
On-Demand
Free-Video
media.ccc.de

Messenger Hacking- Remotely Compromising an iPhone through iMessage - Deutsche Übersetzung

0 rewiews
Detaillierte Einblicke in die Ausnutzung einer iMessage-Sicherheitslücke zur Kompromittierung von iPhones ohne Nutzerinteraktion. Beleuchtet Techniken, Gegenmaßnahmen und Empfehlungen für verbesserte mobile Sicherheit.
Add to list
28 Lesons
1 hour 2 minutes
On-Demand
Free-Video
media.ccc.de

Smart Vacuum Cleaners as Remote Wiretapping Devices - Easterhegg - 2019

0 rewiews
Exploración de vulnerabilidades en aspiradoras inteligentes Neato Botvac Connected, incluyendo extracción de firmware y ejecución remota de código, con implicaciones para la privacidad y seguridad del hogar.
Add to list
21 Lesons
39 minutes
On-Demand
Free-Video
Cooper

Snuffleupagus - Killing Bugclasses in PHP 7, Virtual-Patching the Rest

0 rewiews
Explore Snuffleupagus, an open-source PHP security module that kills bug classes, implements virtual-patching, and enhances protection against vulnerabilities without modifying application code.
Add to list
35 Lesons
27 minutes
On-Demand
Free-Video
SyScan360

Remote Code Execution via Java Native Deserialization

0 rewiews
Explore Java deserialization vulnerabilities, focusing on remote code execution through XML and binary deserialization. Learn about CVEs, tools, and future research in this area.
Add to list
17 Lesons
41 minutes
On-Demand
Free-Video
BruCON Security Conference

Bypassing Microsoft Defender for Identity

0 rewiews
Explore techniques to bypass Microsoft Defender for Identity, executing high-impact attacks across the kill chain while avoiding detection in on-premises Active Directory environments.
Add to list
16 Lesons
55 minutes
On-Demand
Free-Video
media.ccc.de

Fuzzing the Phone in the iPhone

0 rewiews
Explore iPhone baseband security through fuzzing, revealing vulnerabilities in iOS-baseband interface. Discover unexpected effects on device identity, SMS handling, and location services.
Add to list
19 Lesons
55 minutes
On-Demand
Free-Video
Black Hat

Finding New Bluetooth Low Energy Exploits via Reverse Engineering Multiple Vendors' Firmwares

0 rewiews
Explore Bluetooth Low Energy vulnerabilities through firmware reverse engineering, uncovering remote code execution exploits at the protocol's lowest levels without authentication or pairing.
Add to list
25 Lesons
38 minutes
On-Demand
Free-Video
nullcon

Don't Ruck Us Too Hard - Owning All of Ruckus AP Devices

0 rewiews
Explore vulnerabilities in Ruckus AP devices, including pre-authentication remote code execution exploits. Learn about research methods, discovered CVEs, and a framework for cross-architecture analysis.
Add to list
27 Lesons
42 minutes
On-Demand
Free-Video
nullcon

Contextomy - Let's Debug Together

0 rewiews
Explore a critical iOS design flaw allowing remote code execution through debug session hijacking. Learn about the vulnerability's discovery, research, exploitation, and Apple's fix.
Add to list
24 Lesons
44 minutes
On-Demand
Free-Video

The Art of Bit Banging - Gaining Full Control of Nearly Any Bus Protocol

0 rewiews
Learn to manipulate bus protocols through bit banging techniques, gaining control over hardware communication and exploring potential security implications in embedded systems.
Add to list
23 Lesons
37 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

File Structures - Another Binary Exploitation Technique

0 rewiews
Exploring FILE structure exploitation in Glibc to bypass modern OS protections, demonstrating remote code execution techniques and File Stream Oriented Programming.
Add to list
8 Lesons
49 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Get to the Money - Hacking PoS and PoP Systems

0 rewiews
Exploración detallada de vulnerabilidades en sistemas de punto de venta, demostrando vectores de ataque y discutiendo la seguridad de sistemas POS modernos, con énfasis en SAP POS.
Add to list
21 Lesons
51 minutes
On-Demand
Free-Video
Black Hat

Exploiting Excel Online

0 rewiews
Explore Excel Online vulnerabilities, focusing on integer overflow in fnConcatenate formula. Learn about chaining formulas for remote code execution and potential security implications.
Add to list
24 Lesons
41 minutes
On-Demand
Free-Video
Black Hat

Breaking Parser Logic - Take Your Path Normalization Off and Pop 0days Out

0 rewiews
Explore path normalization vulnerabilities, their impact on web security, and techniques to exploit them for bypassing access controls and achieving remote code execution.
Add to list
30 Lesons
43 minutes
On-Demand
Free-Video
Black Hat

How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain

0 rewiews
Explore a JSON deserialization vulnerability in Fastjson, its exploitation for remote code execution, and implications for blockchain security.
Add to list
15 Lesons
40 minutes
On-Demand
Free-Video
Black Hat

The Perl Jam 2 - The Camel Strikes Back

0 rewiews
Exploring critical vulnerabilities in Perl's core modules and CGI frameworks, demonstrating fundamental language issues through 0-days, and challenging the "developer's fault" narrative.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
Black Hat

Hey Man, Have You Forgotten to Initialize Your Memory?

0 rewiews
Exploiting uninitialized memory in 64-bit IE to bypass ASLR, CFG, and EPM sandbox. Techniques for remote code execution and privilege escalation on Windows 8.1 demonstrated through Pwn2Own contest example.
Add to list
1 Lesons
51 minutes
On-Demand
Free-Video
Black Hat

Hackproofing Oracle EBusiness Suite

0 rewiews
Explore vulnerabilities in Oracle eBusiness Suite and learn effective strategies to secure systems against potential attacks, including remote code execution and SQL injection.
Add to list
24 Lesons
50 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Exploiting IPC With New Desynchronization Primitives

0 rewiews
Exploración de vulnerabilidades críticas en SAP, demostrando técnicas avanzadas de explotación HTTP y desincronización para comprometer sistemas empresariales. Incluye demostraciones prácticas y análisis de impacto en la seguridad global.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

How MySQL Servers Can Attack YOU

0 rewiews
Novel attack vector using compromised MySQL servers to target clients, demonstrating remote code execution vulnerabilities in MySQL tools and libraries, including a zero-day exploit bypassing security patches.
Add to list
1 Lesons
53 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Nakatomi Space - Lateral Movement as L1 Post-Exploitation in OT

0 rewiews
Explore lateral movement techniques in OT networks, focusing on vulnerabilities in L1 devices. Learn about BPCS/SIS architectures, exploit chains, and hardening strategies to enhance industrial control system security.
Add to list
1 Lesons
57 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

SeasCoASA - Exploiting A Small Leak In A Great Ship

0 rewiews
Exploiting vulnerabilities in Cisco ASA firewalls: New techniques to bypass protection mechanisms, heap exploitation strategies, and disclosure of a 0-day vulnerability affecting major ASA versions.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Exploiting GLIBC - Hacking Everything

0 rewiews
Exploración detallada de la vulnerabilidad CVE-2015-7547 en glibc, demostrando técnicas de explotación remota y su impacto en diversos productos de software compilados con versiones antiguas.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
44CON Information Security Conference

Exploiting 64 Bit IE on Windows 8.1 - The Pwn2Own Case Study

0 rewiews
Detailed exploration of vulnerabilities and exploit techniques used to compromise 64-bit Internet Explorer on Windows 8.1, including ASLR & CFG bypass and sandbox escape, as demonstrated at Pwn2Own 2015.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
LASCON

DevOops, I Did It Again

0 rewiews
Explore security vulnerabilities in DevOps tools and practices, including AWS, Chef, Puppet, and Jenkins. Learn about misconfigurations and potential risks in fast-paced development environments.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
Black Hat

802.1x and Beyond

0 rewiews
Dissecting IEEE 802.1x and related protocols, exploring vulnerabilities in popular systems, and demonstrating remote code execution over 802.11 wireless using WPA Enterprise.
Add to list
25 Lesons
32 minutes
On-Demand
Free-Video
Black Hat

The New Page of Injections Book - Memcached Injections

0 rewiews
Explore memcached injection vulnerabilities across popular web platforms, learning attack techniques, potential impacts, and post-exploitation strategies for improved application security.
Add to list
18 Lesons
49 minutes
On-Demand
Free-Video
Black Hat

Huawei - From China with Love

0 rewiews
Exploring vulnerabilities in 3G/4G USB modems, focusing on Huawei devices. Discusses potential for widespread infection and botnet creation through software exploits.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
Black Hat

Java Every-Days - Exploiting Software Running on 3 Billion Devices

0 rewiews
Explore Java vulnerabilities, exploitation trends, and security measures in this Black Hat talk. Gain insights into common weaknesses, attack surfaces, and Oracle's responses to protect 3 billion devices.
Add to list
28 Lesons
52 minutes
On-Demand
Free-Video
Recon Conference

Hunt for Red October

0 rewiews
Explore Windows networking internals, reverse engineering techniques, and recent vulnerabilities like CVE-2023-23415 in this insightful talk on uncovering security flaws in the Windows networking stack.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
Black Hat

Attacking the WebAssembly Compiler of WebKit

0 rewiews
Explore vulnerabilities in WebKit's WebAssembly compiler, focusing on recent updates and new features. Learn about potential security risks and attack surfaces in browser implementations.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
44CON Information Security Conference

Realtime Communications, Realtime Risks

0 rewiews
Explore WebSocket security risks, vulnerabilities in enterprise applications, and a new Burp Suite extension for improved pentesting of real-time communications.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
Black Hat

16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code Execution

0 rewiews
Découverte de 16 vulnérabilités zero-day dans CODESYS, un framework logiciel pour automates programmables industriels, affectant potentiellement des millions d'appareils dans divers secteurs industriels.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
Black Hat

Stealing With Style - Using CSS to Exploit ProtonMail & Friends

0 rewiews
Explore critical vulnerabilities in privacy-focused webmail providers, including email theft and remote code execution, through CSS exploitation techniques in ProtonMail, Tutanota, and Skiff.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Black Hat

Prototype Pollution Leads to RCE - Gadgets Everywhere

0 rewiews
Explore how Prototype Pollution vulnerabilities in JavaScript can lead to remote code execution, analyzing Node.js core code and NPM packages for potential security risks.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
EuroPython Conference

The Return of Peer to Peer Computing

0 rewiews
Exploring peer-to-peer computing concepts, code, and applications developed by Pythonistas in response to surveillance concerns, with focus on decentralized systems and strong cryptography.
Add to list
32 Lesons
40 minutes
On-Demand
Free-Video
EuroPython Conference

Rehabilitating Pickle

0 rewiews
Explore Pickle's security risks, potential defenses, and alternatives for safe Python object serialization in distributed systems.
Add to list
17 Lesons
30 minutes
On-Demand
Free-Video
Black Hat

Diving Into Spooler - Discovering LPE and RCE Vulnerabilities in Windows Printer

0 rewiews
Uncover critical vulnerabilities in Windows Printer Spooler, exploring potential LPE and RCE exploits. Learn from past attacks and discover hidden security risks in this essential system component.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
DEFCONConference

Prototype Pollution Leading to Remote Code Execution in NodeJS

0 rewiews
Delve into prototype pollution vulnerabilities in Node.js, exploring how they enable remote code execution, analyzing real-world exploits, and understanding recent security mitigations.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
DEFCONConference

Hacking Millions of Modems and Investigating Modem Security Vulnerabilities

0 rewiews
Dive into a real-world investigation of modem vulnerabilities, ISP security flaws, and the concerning centralization of broadband infrastructure through a personal hacking incident analysis.
Add to list
6 Lesons
25 minutes
On-Demand
Free-Video
DEFCONConference

Exploiting Localhost APIs From The Browser - Zero-Day Vulnerability and Attack Techniques

0 rewiews
Discover how browser-based attacks exploit localhost services through a zero-day vulnerability, featuring live demonstrations of remote code execution and novel attack techniques targeting developers behind firewalls.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
DEFCONConference

Atomic Honeypot - A MySQL Honeypot That Drops Shells

0 rewiews
Discover how a weaponized MySQL honeypot server exploits vulnerabilities to counter-attack malicious clients, featuring innovative use of CVE-2023-21980 and CVE-2024-21096 for defensive security research.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
Black Hat

Fuzzing Windows RDP Client for Vulnerabilities - A Research Journey

0 rewiews
Explore Windows RDP client vulnerability research: from initial steps to uncovering remote code execution flaws. Learn about fuzzing tools, overcoming challenges, and recommendations for RDP security.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
Black Hat

CertifiedDCOM - The Privilege Escalation Journey to Domain Admin with DCOM

0 rewiews
Uncover a critical DCOM vulnerability allowing remote privilege escalation to Domain Admin in Windows networks. Learn about DCOM internals and exploit techniques for Active Directory takeover.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
Black Hat

I Am Whoever I Say I Am - Infiltrating Identity Providers Using a 0-Click Exploit

0 rewiews
Explore unauthenticated remote code execution in popular IAM solutions, covering past attacks, audit approaches, and vulnerability chaining for infiltrating identity providers.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
DEFCONConference

Reverse Engineering and Hacking Ecovacs Robots - Security Vulnerabilities and Privacy Concerns

0 rewiews
Dive into the security vulnerabilities of Ecovacs robots, exploring broken encryption, unauthorized camera access, and privacy concerns while learning techniques for privacy-preserving usage and rooting.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video