Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Vulnerability Research

Showing: 197 courses
Cyber Mentor

Ethical Hacking in 15 Hours - 2023 Edition - Learn to Hack

1 rewiews
Comprehensive ethical hacking training covering advanced techniques like subdomain hunting, vulnerability scanning, exploitation, and buffer overflows. Includes hands-on practice with multiple virtual machines.
Add to list
43 Lesons
7 hours 17 minutes
On-Demand
Free-Video
Black Hat

Project Zero: Ten Years of Making Zero-Day Exploits Hard

0 rewiews
Explore Project Zero's decade-long mission to combat 0-day vulnerabilities, examining its impact on security research, bug discovery, and the evolving landscape of cyber threats.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Eko2020 Workshops - Antonio Morales Maldonado: Advanced Fuzzing Workshop

0 rewiews
Taller práctico de técnicas avanzadas de fuzzing y búsqueda de vulnerabilidades con formato CTF. Orientado a profesionales con conocimientos previos para mejorar habilidades en seguridad informática.
Add to list
1 Lesons
1 hour 49 minutes
On-Demand
Free-Video
Ekoparty Security Conference

A Journey Finding Pre and Post-Auth D-Link Router Zero-Days

0 rewiews
Explora el proceso de descubrimiento y explotación de vulnerabilidades 0-day en routers D-Link, desde obtener acceso al firmware hasta identificar y explotar fallos de seguridad para lograr ejecución remota de código.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Introducción al Reversing - Ingeniería Inversa para Seguridad Informática

0 rewiews
Introducción a la Ingeniería Inversa: fundamentos, aplicaciones en seguridad informática y herramientas esenciales. Ideal para principiantes interesados en exploits, análisis de malware y más.
Add to list
1 Lesons
1 hour 10 minutes
On-Demand
Free-Video
IEEE

RetroWrite- Statically Instrumenting COTS Binaries for Fuzzing and Sanitization

0 rewiews
Explore static instrumentation of COTS binaries for enhanced fuzzing and sanitization using RetroWrite, a framework for rewriting position-independent code.
Add to list
11 Lesons
16 minutes
On-Demand
Free-Video
IEEE

CacheOut - Leaking Data on Intel CPUs via Cache Evictions

0 rewiews
Explore Intel CPU vulnerabilities, focusing on CacheOut attack, its mechanisms, potential targets, and countermeasures for enhanced system security.
Add to list
6 Lesons
15 minutes
On-Demand
Free-Video
IEEE

Unleashing Mayhem on Binary Code

0 rewiews
Explore automated exploit generation for binary programs using hybrid symbolic execution and index-based memory modeling. Learn techniques to find and demonstrate exploitable vulnerabilities efficiently.
Add to list
22 Lesons
22 minutes
On-Demand
Free-Video
Bugcrowd

LevelUp 0x04 - Introduction to Ethical Hacking and Bug Bounty - Day 1

0 rewiews
Explore cutting-edge cybersecurity insights and strategies at this free conference, featuring expert talks and discussions on the latest industry trends and challenges.
Add to list
1 Lesons
4 hours 36 minutes
On-Demand
Free-Video
Bugcrowd

iPhone Baseband Research and Reversing - Security Insights and Techniques

0 rewiews
Explore iPhone baseband internals, research techniques, and tools for firmware analysis, reversing, and exploitation. Gain insights into Qualcomm baseband architecture and vulnerabilities.
Add to list
22 Lesons
48 minutes
On-Demand
Free-Video
Bugcrowd

8 Ways to Almost Never Get a Dupe Again in Bug Bounty Hunting

0 rewiews
Discover strategies to minimize duplicate bug reports in bug bounty hunting, including developing expertise, exploring unique targets, and leveraging personal strengths.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
NahamSec

Read The Bleeping RFC - Understanding Network Protocols for Security

0 rewiews
Explore RFC vulnerabilities and their impact on web security with Inti De Ceukelaire. Learn to identify and exploit logic flaws in protocols for more effective bug hunting and penetration testing.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
NahamSec

Bug Bounties, Pulse Secure Research, and Hacking the US Department of Defense - Interview with Alyssa Herrera

0 rewiews
Insightful discussion on bug bounties, cybersecurity research, and ethical hacking experiences, featuring expert insights from Alyssa Herrera on various high-profile targets.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
SyScan360

Back to the Core - Exploring Fundamental Security Concepts

0 rewiews
Explore advanced techniques for analyzing and exploiting core system vulnerabilities in this in-depth security presentation from SyScan'15 Singapore.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
LASCON

Responsible Disclosure Preparedness for IoT Security - 2017

0 rewiews
Exploring IOT security flaws in garage door systems, from discovery to responsible disclosure. Learn about research techniques and the process of addressing vulnerabilities in connected devices.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video

Bypassing EMET 4.1 - Exploiting Enhanced Mitigation Experience Toolkit

0 rewiews
Learn techniques for bypassing Microsoft's Enhanced Mitigation Experience Toolkit (EMET) with expert insights on exploit development and security vulnerabilities.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video

Microsoft Vulnerability Research: How to Be a Finder as a Vendor - Notacon 11

0 rewiews
Explore Microsoft's approach to vulnerability research, focusing on third-party findings, reporting processes, and lessons learned from case studies. Gain insights into effective vulnerability management.
Add to list
29 Lesons
33 minutes
On-Demand
Free-Video

Empirical Exploitation in Cybersecurity - HD Moore

0 rewiews
Explore empirical exploitation techniques with HD Moore, delving into cutting-edge cybersecurity research and practical applications for identifying vulnerabilities.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
OWASP Foundation

MarkDoom: How I Hacked Every Major IDE in 2 Weeks

0 rewiews
Explore how major IDEs were hacked through embedded browsers, revealing critical security vulnerabilities in desktop applications built with web technologies. Learn about the risks and safeguards in the "Desktop Web" era.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Cooper

Malicious Use of Microsoft Local Administrator Password Solution

0 rewiews
Exploiting vulnerabilities in Microsoft's LAPS to gain unauthorized access to local administrator credentials and maintain presence on compromised systems in post-exploitation scenarios.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

NVMe: New Vulnerabilities Made Easy - Exploiting Cloud Storage Protocols

0 rewiews
Exploring pre-auth remote vulnerabilities in NVMe implementation, emphasizing the importance of SCA tools in production pipelines and showcasing discoveries in Linux kernel and NVIDIA.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
media.ccc.de

Analyzing Cellular Basebands with FirmWire

0 rewiews
Explore FirmWire, an open-source platform for analyzing cellular basebands. Learn about baseband vulnerabilities, emulation techniques, and how to uncover security flaws in LTE and GSM stacks.
Add to list
1 Lesons
53 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Writing a New Decompiler for JRuby Security Audits

0 rewiews
Explore JRuby vulnerabilities and learn about YBurj, a new open-source decompiler for JRuby IR, enabling recovery of compiled source code for enhanced security audits.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Escaping From VMware Workstation Through the Disk Controller

0 rewiews
Exploración detallada de una vulnerabilidad en los controladores de disco de VMware Workstation que permite escapar de una máquina virtual, con demostraciones de exploits para Linux y Windows.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

B(l)utter - Reversing Flutter Applications - HITB2023HKT COMMSEC Day 2

0 rewiews
Innovative approach to reverse engineering Flutter apps using Dart runtime source code. Introduces B(l)utter tool for metadata extraction, code analysis, and Frida script generation.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
Linux Foundation

Security Research with Open Source Software - Volume Omega

0 rewiews
Explore open source software security with the OpenSSF Alpha-Omega team. Learn about automated security patches, vulnerability research, and tools to address global security concerns in the OSS ecosystem.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
secwestnet

Exploit Hall of Fame Interview - Project Zero's Natalie Silvanovich

0 rewiews
Insightful interview with Project Zero's Natalie Silvanovich, exploring her expertise in exploit research and cybersecurity. Gain valuable insights into vulnerability discovery and cutting-edge security practices.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
secwestnet

PWN2OWN Austin 2021 - Phones, Printers, NAS, and More

0 rewiews
Explore cutting-edge cybersecurity challenges at PWN2OWN Austin 2021, featuring hacking competitions for phones, printers, NAS devices, and routers with over $500,000 in prizes.
Add to list
1 Lesons
2 hours 27 minutes
On-Demand
Free-Video
secwestnet

Drone vs Tesla: Exploiting Vulnerabilities in Automotive Systems

0 rewiews
Explore the security vulnerabilities in Tesla vehicles through a drone-based attack demonstration, highlighting potential risks and countermeasures in automotive cybersecurity.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Black Hat

The Hack@DAC Story - Learnings from Organizing the World's Largest Hardware Hacking Competition

0 rewiews
Explore insights from organizing Hack@DAC, the world's largest hardware hacking competition. Learn about unique aspects, value for the security community, and key takeaways for industry, academia, and researchers.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
OffensiveCon

Inside Apple's Lightning: JTAGging the iPhone for Fuzzing and Profit

0 rewiews
Explore Apple's Lightning protocol, learn iPhone JTAGging techniques, and discover fuzzing methods for potential vulnerabilities and profit.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
OffensiveCon

Exploit Engineering: Attacking the Linux Kernel

0 rewiews
Explore Linux kernel exploitation techniques, from attack surface mapping to vulnerability discovery and exploit development. Gain insights into advanced kernel exploitation methods and tools.
Add to list
36 Lesons
59 minutes
On-Demand
Free-Video
OffensiveCon

Changing and Unchanged Things in Vulnerability Research

0 rewiews
Explore vulnerability research evolution, from buffer overflows to advanced fuzzing and exploit mitigations. Analyze case studies and future trends in offensive and defensive security strategies.
Add to list
27 Lesons
58 minutes
On-Demand
Free-Video
OffensiveCon

Unearthing Vulnerabilities in the Apple Ecosystem - The Art of KidFuzzerV2.0

0 rewiews
Explore Apple's kernel vulnerabilities, attack surfaces, and mitigations. Learn advanced fuzzing techniques and root cause analysis for enhanced security understanding.
Add to list
12 Lesons
29 minutes
On-Demand
Free-Video
OffensiveCon

Advancements in JavaScript Engine Fuzzing - OffensiveCon 2023

0 rewiews
Explore advancements in JavaScript engine fuzzing, covering techniques like splicing, code coverage, and hybrid engines to enhance bug discovery and security testing.
Add to list
23 Lesons
23 minutes
On-Demand
Free-Video
OffensiveCon

New Phones, Software and Chips - New Bugs?

0 rewiews
Explore cutting-edge vulnerabilities in modern smartphones, examining software and hardware innovations that introduce new security challenges.
Add to list
1 Lesons
1 hour
On-Demand
Free-Video
OffensiveCon

How to Hack Shannon Baseband from a Phone

0 rewiews
Explore techniques for hacking Shannon baseband from a phone, uncovering vulnerabilities and potential exploits in mobile communication systems.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
OffensiveCon

ASN.1 and Done: A Journey of Exploiting ASN.1 Parsers in the Baseband

0 rewiews
Explore ASN.1 parser vulnerabilities in cellular baseband, uncovering security risks and exploitation techniques in mobile communication systems.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
OffensiveCon

Abusing Linux In-Kernel SMB Server to Gain Kernel Remote Code Execution

0 rewiews
Explore Linux kernel vulnerabilities and gain insights into exploiting the in-kernel SMB server for remote code execution.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
OffensiveCon

The Print Spooler Bug that Wasn't in the Print Spooler

0 rewiews
Explore a unique Windows vulnerability discovery, from initial bug report to full exploit chain, with insights on Microsoft's patch process and security implications.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
Black Hat

URB Excalibur - New VMware All-Platform VM Escapes

0 rewiews
Unveils groundbreaking research on VMware hypervisor vulnerabilities, focusing on virtual USB controllers. Demonstrates novel VM escape techniques using URB, showcasing a critical heap out-of-bounds write vulnerability across all VMware platforms.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
Black Hat

The Dark Side of EDR - Repurposing EDR as an Offensive Tool

0 rewiews
Explore innovative attack vector transforming EDR into stealthy malware. Learn to bypass security features, exfiltrate data, and establish persistent control, focusing on Palo Alto Networks Cortex XDR.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
DefCamp

Backdooring 4 Million Modems with 6 Bugs in a Week - Cybersecurity Case Study

0 rewiews
Explore how a researcher exploited vulnerabilities to potentially compromise millions of modems, highlighting the critical importance of cybersecurity in telecommunications infrastructure.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
Fuzzing_in - Hardik Shah

The Hunt for CVE-2023-0286 - Replicating OpenSSL's Latest Vulnerability

0 rewiews
Replicate CVE-2023-0286 in OpenSSL, learn to write a libfuzzer harness, and explore vulnerability research techniques for enhanced security awareness and threat prevention.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
OWASP Foundation

From Theory to Practice - Navigating the Challenges of Vulnerability Research

0 rewiews
Explore practical challenges and strategies in vulnerability research, enhancing your skills to identify and mitigate security weaknesses in software systems.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
BSidesLV

CVE Hunting: Wi-Fi Routers, OSINT and The Tyranny of the Default

0 rewiews
Explore CVE hunting techniques for Wi-Fi routers, focusing on default credential vulnerabilities and OSINT strategies to uncover critical security flaws across manufacturers.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
NorthSec

Finding and Exploiting Critical Vulnerabilities in RPC Services - NorthSec 2023

0 rewiews
Comprehensive walkthrough of finding, exploiting, and reporting critical vulnerabilities in an RPC service, covering reverse engineering, authentication bypass, and coordinated disclosure.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
OffensiveCon

Blasting Past WebP - Exploring Image Format Vulnerabilities

0 rewiews
Explore advanced techniques for bypassing WebP image format security measures, uncovering vulnerabilities and potential exploits in web applications.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
OffensiveCon

ACE up the Sleeve: Hacking into Apple's New USB-C Controller

0 rewiews
Explore Apple's USB-C controller vulnerabilities and hacking techniques with expert Thomas Roth in this cutting-edge cybersecurity presentation.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
OffensiveCon

Attacking the Samsung Galaxy A Boot Chain

0 rewiews
Explore Samsung Galaxy A* boot chain vulnerabilities and attack techniques for enhanced mobile security understanding.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
OffensiveCon

Beyond Android MTE: Navigating OEM's Logic Labyrinths

0 rewiews
Explore advanced Android security, focusing on Memory Tagging Extension (MTE) and OEM-specific implementations. Gain insights into exploiting vulnerabilities in custom logic.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
OffensiveCon

One SMS to Root Them All: Exposing Critical Threats in Connected Devices

0 rewiews
Explore critical vulnerabilities in connected devices through SMS exploitation, uncovering potential threats to millions of users worldwide.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
HackMiami

Hunting File System Redirection Bugs Through Instrumentation

0 rewiews
Explore file system redirection vulnerabilities and learn advanced techniques for identifying and exploiting these security risks in Windows systems.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Unexpected Intrusion Testing Results in SAP Systems - Critical Vulnerabilities and Exploits

0 rewiews
Unveiling critical vulnerabilities in SAP Start Service, from local to remote exploits. Explores memory corruption and OS command injection leading to root-level RCE, with live demo and recommendations.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Windows Agentless C2 - Abusing the MDM Client Stack

0 rewiews
Unveils innovative research on exploiting Windows MDM stack for agentless C2 systems. Explores vulnerabilities, custom C2 server creation, and remote device control techniques, inspiring new defensive strategies.
Add to list
1 Lesons
53 minutes
On-Demand
Free-Video
OffensiveCon

Attacking Windows Device Drivers: Almost Escaping the Sandbox

0 rewiews
Explore techniques for attacking Windows device drivers and potential sandbox escape methods in this advanced security analysis presentation.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
OffensiveCon

Practical Exploitation of Registry Vulnerabilities in the Windows Kernel

0 rewiews
Explore practical exploitation techniques for Windows kernel registry vulnerabilities, enhancing your understanding of system security and potential attack vectors.
Add to list
1 Lesons
54 minutes
On-Demand
Free-Video
OWASP Foundation

Exploiting Web Messaging Implementations

0 rewiews
Uncover vulnerabilities in cross-document messaging, learn common developer mistakes, and explore open-source tools for identifying post messaging security issues in web applications.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
BSidesLV

Racing for Hidden Treasures in Public GitHub Repositories - Exploiting Build Artifacts

0 rewiews
Explore a novel attack vector in GitHub Actions, uncovering hidden access tokens in build artifacts and racing against time to exploit ephemeral credentials for swift attacks on open-source projects.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
nullcon

Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS

0 rewiews
Explore macOS IPC security, focusing on Mach message handlers. Learn about custom fuzzing techniques to uncover vulnerabilities in privileged RPC-like functions, potentially leading to sandbox escapes and privilege escalations.
Add to list
1 Lesons
53 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

How I Found 16 Microsoft Office Excel Vulnerabilities in 6 Months

0 rewiews
Discover the process of finding 16 Microsoft Excel vulnerabilities through fuzzing, including corpus selection, mutation algorithms, and result management techniques.
Add to list
35 Lesons
38 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Shaping the Future of the 0Day Market

0 rewiews
Shaping the future of the 0-day vulnerability market through improved standards, platforms, and practices to enhance cybersecurity capabilities for law enforcement and intelligence agencies.
Add to list
11 Lesons
25 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Hacking the 0day Marketplace

0 rewiews
Exploring the 0day vulnerability market's challenges and proposing solutions to improve efficiency, safety, and professionalism for all stakeholders in cybersecurity.
Add to list
16 Lesons
28 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

MIPS-X - The Next IoT Frontier

0 rewiews
Explore MIPS-based IoT device research with a framework for efficient emulation, vulnerability analysis, and exploit development. Gain insights into CPU architectures, virtualization, and cross-compilation techniques.
Add to list
22 Lesons
39 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Fuzzing RDP Client and Server

0 rewiews
Exploring innovative techniques to fuzz RDP protocol using WinAFL, uncovering vulnerabilities in both client and server implementations for enhanced remote connection security.
Add to list
23 Lesons
47 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Container Escape in 2021

0 rewiews
Explore new methods for escaping privileged runc containers, focusing on cloud security vulnerabilities and innovative exploit techniques in container environments.
Add to list
20 Lesons
43 minutes
On-Demand
Free-Video
NorthSec

Hacking K-12 School Software in a Time of Remote Learning

0 rewiews
Análisis de vulnerabilidades en software educativo durante la pandemia, explorando ataques potenciales y sus implicaciones para la seguridad de dispositivos escolares y domésticos.
Add to list
10 Lesons
30 minutes
On-Demand
Free-Video
NorthSec

One Key To Rule Them All

0 rewiews
Explore elliptic curve cryptography, Bitcoin wallets, and key management in this security researcher's talk on innovative cryptographic techniques and their applications.
Add to list
15 Lesons
30 minutes
On-Demand
Free-Video
Recon Conference

Researching the Unisoc Baseband

0 rewiews
Exploring Unisoc baseband security: reverse-engineering and fuzzing LTE protocol stack to uncover vulnerabilities in budget smartphone chipsets, disrupting radio communication.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
Recon Conference

Reverse Engineering of Black Box Binaries with Symbolic and Concolic Execution Technique

0 rewiews
Explore symbolic and concolic execution techniques to simplify reverse engineering of complex binaries. Learn to use the angr framework for efficient crackme solving and deobfuscation.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
Recon Conference

Neurosurgery for Industrial Routers - Security of Sarian OS

0 rewiews
Explore vulnerabilities in industrial routers, focusing on Digi WR21 and Sarian OS. Uncover internal workings, network protocols, and security features of critical infrastructure devices.
Add to list
1 Lesons
1 hour 1 minute
On-Demand
Free-Video
Recon Conference

Hackable Security Modules - Reversing and Exploiting a FIPS 140-2 Lvl 3 HSM Firmware

0 rewiews
Exploring vulnerabilities in Hardware Security Modules (HSMs) through firmware analysis and reverse engineering of the TMS320C64x DSP architecture, with focus on the Utimaco SecurityServer.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
nullcon

Breaking Formation - From an Error Message to Internal AWS Infrastructure

0 rewiews
Explore a critical AWS CloudFormation vulnerability, its impact on cloud security, and the disclosure process. Gain insights into cloud infrastructure vulnerabilities and future research directions.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
nullcon

Finding and Exploiting Bugs in TLS Libraries Used by Smart UPS Devices

0 rewiews
Explore zero-click vulnerabilities in smart UPS devices, uncovering potential remote takeover risks and physical threats. Includes demonstration of exploits and discussion on cybersecurity implications.
Add to list
1 Lesons
51 minutes
On-Demand
Free-Video
nullcon

Bug Hunter Adventures

0 rewiews
Discover reconnaissance techniques and tools for finding vulnerabilities in Google's Vulnerability Reward Program. Learn from experienced bug hunters' journeys and insights into this coveted program.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
nullcon

Building Advanced Security Applications on Qiling.io

0 rewiews
Explore Qiling.io's sandbox emulator framework for cross-platform binary analysis. Learn to build advanced security tools like fuzzers and malware analyzers using Qiling's flexible architecture and Python API.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Static Analysis-Based Recovery of Service Function Calls in UEFI Firmware

0 rewiews
Discover a new tool for automated recovery of service calls and EFI type info in UEFI firmware, simplifying vulnerability hunting and making firmware code resemble original source.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Fuzzing - Finding Your Own Bugs and 0days

0 rewiews
Aprende técnicas de fuzzing para descubrir vulnerabilidades y exploits de día cero. Incluye demostraciones prácticas de Buffer Overflow y creación de shellcode para pruebas de penetración.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
Ekoparty Security Conference

SpeedPwning VMware Workstation

0 rewiews
Discover the journey of reversing VMware Workstation vulnerabilities and developing a VM escape exploit in record time, offering insights into advanced security research techniques and time-pressured exploit development.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Ekoparty Security Conference

#EkoPodcast Episodio 2 | Hablamos con Dan Borgogno sobre vulnerabilidades en tecnología MiFare

0 rewiews
Entrevista con Dan Borgogno sobre hallazgos de vulnerabilidades en sistemas SUBE y DNI Digital argentinos, destacando la importancia de reportar fallos de seguridad en tecnología MiFare.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Hacking the Pandemic's Most Popular Software - Zoom

0 rewiews
Explore the vulnerabilities in Zoom discovered during Pwn2Own, including the process of finding and exploiting them to gain full control over a victim's system.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
Ekoparty Security Conference

De 0 a millones de dólares en un par de paquetes

0 rewiews
Descubre cómo vulnerabilidades recientes expusieron millones de dólares en Internet. Aprende sobre exploits públicos que amenazan a grandes empresas y cómo fueron descubiertos y explotados en solo 72 horas tras los parches.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Black Hat

A Journey Into Fuzzing WebAssembly Virtual Machines

0 rewiews
Explore WebAssembly VM architecture, attack surfaces, and fuzzing strategies. Learn about bug discovery across multiple projects using various fuzzing techniques and frameworks.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
Black Hat

Trace Me if You Can - Bypassing Linux Syscall Tracing

0 rewiews
Novel vulnerabilities and exploitation techniques to bypass Linux syscall tracing, even with security measures like seccomp, SELinux, and AppArmor in place. Demonstrates how user-mode programs can evade detection.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
WEareTROOPERS

Letting Your Fuzzer Knows About Target's Internals

0 rewiews
Explore advanced fuzzing techniques to enhance vulnerability detection by incorporating target system knowledge, improving efficiency and effectiveness in security testing.
Add to list
1 Lesons
1 hour 13 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Mostrame la Guita! Adventures In Buying Vulnerabilities

0 rewiews
Explora las complejidades y desafíos del mercado de vulnerabilidades de seguridad, analizando estrategias de compra, valoración y negociación en este fascinante sector.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
Ekoparty Security Conference

The Game - Life and How to Hack It

0 rewiews
Aprende ingeniería inversa y desarrollo de trucos para videojuegos a través de la experiencia de un experto en seguridad, utilizando el MMORPG Rakion como ejemplo práctico.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Exploiting Samsung - Analysis of an In-The-Wild Samsung Exploit Chain

0 rewiews
Análisis técnico detallado de una cadena de exploits 0-day de Samsung usada en la naturaleza, explicando vulnerabilidades, explotación, correcciones y demostraciones de forma accesible pero técnicamente avanzada.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip

0 rewiews
Exploración de vulnerabilidades en el chip Titan M de Google, desde análisis estático hasta ejecución simbólica dinámica. Incluye demostración de explotación de CVE-2022-20233 para obtener ejecución de código.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Exploring the Hidden Attack Surface of OEM Routers

0 rewiews
Descubre vulnerabilidades críticas en routers OEM y sus implicaciones para la seguridad. Análisis detallado de un caso de estudio que revela fallos en la cadena de suministro y prácticas de seguridad deficientes.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
nullcon

Changing the Colors of Your Keyboard Might Lead to Privilege Escalation

0 rewiews
Uncover how gaming keyboard software can lead to kernel vulnerabilities, exploring real-world exploits and discussing future implications for Linux kernel security.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
nullcon

Hacking Android Foreground Services Escalation Of Privileges

0 rewiews
Explore Android foreground services vulnerabilities, including a race condition bug and its patch bypass, demonstrating potential escalation of privileges and security implications.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
media.ccc.de

From Zero to Zero Day

0 rewiews
Journey from coding challenges to discovering a critical Edge browser vulnerability, with insights on JIT type confusion and browser exploitation.
Add to list
12 Lesons
48 minutes
On-Demand
Free-Video
nullcon

The Achilles Heel of the macOS Gatekeeper

0 rewiews
Explore macOS Gatekeeper's vulnerabilities, recent bypasses, and a novel 0day. Learn about detection heuristics for enhanced system security on Apple devices.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Historias de 0days, Disclosing y Otras Yerbas

0 rewiews
Experiencias y anécdotas sobre descubrimiento de vulnerabilidades, divulgación responsable y aspectos éticos en la seguridad informática.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
BruCON Security Conference

Finding 0days in Embedded Systems with Code Coverage Guided Fuzzing

0 rewiews
Innovative fuzzing technique for embedded systems, overcoming challenges to discover critical vulnerabilities in network devices through emulation, dynamic binary instrumentation, and guided fuzzing.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
44CON Information Security Conference

Researching Android Device Security with the Help of a Droid Army

0 rewiews
Explore Android device security using a diverse cluster, addressing fragmentation challenges and enabling efficient vulnerability research and testing across multiple devices.
Add to list
38 Lesons
1 hour 8 minutes
On-Demand
Free-Video
NorthSec

Critical Vulnerabilities in Network Equipment - Past, Present, and Future

0 rewiews
Explore critical vulnerabilities in network equipment, from routers to firewalls. Learn about common patterns, historical context, and future trends in cybersecurity for these essential devices.
Add to list
15 Lesons
31 minutes
On-Demand
Free-Video
Ekoparty Security Conference

Breaking the Security Barrier of a Major Infusion Pump - Douglas McKee & Philippe Laulheret - Ekoparty 2021

0 rewiews
Explore the process of remotely compromising a widely-used hospital infusion pump, including firmware analysis, vulnerability research, and exploitation demonstrations.
Add to list
15 Lesons
42 minutes
On-Demand
Free-Video
Hack in Paris

The Internet of Vulnerabilities - Deral Heiland - Hack in Paris - 2017

0 rewiews
Explore IoT security vulnerabilities and research methodologies with insights on ecosystem structures, live demonstrations, and manufacturer collaborations for mitigation strategies.
Add to list
20 Lesons
39 minutes
On-Demand
Free-Video