Play allExploits and vulnerabilities
373 videos • 239 hr 48 min
Part of Security. Ordered by how many people recommended each video and for how long; 47 are classics.
1 2 3 Compiling C to printable x86, to make an executable research paper
suckerpinch
Recommended by 10 •
Classic4 DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
Recommended by 11 •
Classic5 6 Guarding Against Physical Attacks: The Xbox One Story — Tony Chen, Microsoft
Platform Security Summit
Recommended by 9 •
Classic7 Break Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas
Adrian Crenshaw
Recommended by 7 •
Classic8 27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
basti0007
Recommended by 8 •
Classic9 10 11 BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”
Microsoft Israel R&D Center
Recommended by 7 •
Classic12 13 14 15 How I Fixed a 10 Year Old Guitar Hero Bug Without the Source Code
ExileLord
Recommended by 4 •
Classic16 DEF CON 22 - Deviant Ollam & Howard Payne - Elevator Hacking - From the Pit to the Penthouse
DEFCONConference
Recommended by 5 •
Classic17 18 19 20 21 22 David Kriesel: Traue keinem Scan, den du nicht selbst gefälscht hast
media.ccc.de
Recommended by 4 •
Classic23 [HOPE X] Elevator Hacking: From the Pit to the Penthouse
themarimbaincident
Recommended by 4 •
Classic24 DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! (w speaker)
Christiaan008
Recommended by 4 •
25 26 Defcon 20 - Dan Tentler - Drinking from the caffeine firehose we know as shodan
vissago
Recommended by 4 •
Classic27 DEF CON 23 - Chris Domas - Repsych: Psychological Warfare in Reverse Engineering
DEFCONConference
Recommended by 5 •
Classic28 DEFCON 21 - DNS May Be Hazardous to Your Health - Robert Stucke
Robert Stucke (bobhex)
Recommended by 3 •
29 Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd"
Hackfest Communication
Recommended by 4 •
30 Reversing WannaCry Part 1 - Finding the killswitch and unpacking the malware in #Ghidra
stacksmashing
Recommended by 2 •
31 DEF CON 26 - Christopher Domas - GOD MODE UNLOCKED Hardware Backdoors in redacted x86
DEFCONConference
Recommended by 4 •
Classic32 33 RE//verse 2026: Hacking the Xbox One by Markus 'doom' Gaasedelen
REverse Conference
Recommended by 3 •
34 35 USENIX Enigma 2016 - NSA TAO Chief on Disrupting Nation State Hackers
USENIX Enigma Conference
Recommended by 5 •
Classic36 37 38 Nina Kollars - Confessions of an Nespresso Money Mule - DEF CON 27 Conference
DEFCONConference
Recommended by 4 •
Classic39 DEF CON 29 - Richard Henderson - Old MacDonald Had a Barcode, E I E I CAR
DEFCONConference
Recommended by 4 •
Classic40 41 Bare-metal ARM firmware reverse engineering with Ghidra and SVD-Loader
stacksmashing
Recommended by 2 •
42 43 44 45 46 29C3 Panel: Jesselyn Radack, Thomas Drake, William Binney on whistleblowing and surveillance
thisdayinwikileaks
Recommended by 3 •
Classic47 Creating a "virus" for Pokemon Red and Blue (self replicating save file!!)
MrCheeze
Recommended by 2 •
48 49 50 51 52 53 54 55 56 57 58 59 Finally Obtaining the Triforce in Ocarina of Time: Triforce Percent Explained
Retro Game Mechanics Explained
Recommended by 2 •
60 Howard Payne & Deviant Ollam - This Key is Your Key, This Key is My Key
DeviantOllam
Recommended by 3 •
Classic61 62 The KGB, The Computer and Me - The Cuckoo’s Egg Story
Australian Phoenix CyberOps
Recommended by 3 •
Hidden gem63 Alex Ionescu - The "Bird" That Killed Arbitrary Code Guard - Ekoparty 2017
Ekoparty Security Conference
Recommended by 2 •
Hidden gem64 Black Hat 2013 - Exploiting Network Surveillance Cameras Like a Hollywood Hacker
HackersOnBoard
Recommended by 2 •
65 66 DEFCON 17: Reverse Engineering By Crayon: Hypervisor Based Malware Analysis and Visualization
Christiaan008
Recommended by 2 •
Hidden gem67 68 DEF CON 26 - Christopher Domas - The Ring 0 Facade Awakening the Processors Inner Demons
DEFCONConference
Recommended by 2 •
Classic69 BONUS- BLACK HAT- Barnaby Jack - Jackpotting Automated Teller Machines Redux - Video
Mad Science Gaming
Recommended by 1 •
70 What Spectre Means for Lanugage Implementers - Ben Titzer - PLISS 2019
PLISS
Recommended by 2 •
Hidden gem71 72 73 BlueHat Seattle 2019 || Guarding Against Physical Attacks: The Xbox One Story
Microsoft Security Response Center (MSRC)
Recommended by 2 •
Classic74 75 Smart TV Hacking (Oneconsult Talk at EBU Media Cyber Security Seminar)
Oneconsult AG
Recommended by 1 •
76 Todd Mortimer Removing ROP Gadgets from OpenBSD EuroBSDCon 2018
Tom Smyth
Recommended by 2 •
Hidden gem77 78 79 Pokemon Red/Blue Virus 2.0, and the Mew that was hiding under the truck all along.
MrCheeze
Recommended by 1 •
80 81 Cloak & Dagger: From Two Permissions to Complete Control of the UI Feedback Loop
Black Hat
Recommended by 1 •
82 83 Researcher Cracks Elder Scrolls Online, Dark Age of Camelot, and Wildstar (Livestream archive)
Motherboard
Recommended by 1 •
84 Ocarina of Time TAS by dwangoAC, TASBot, Savestate, Sauraen in 53:05 - Summer Games Done Quick 2022
Games Done Quick
Recommended by 2 •
85 86 87 37C3 - Operation Triangulation: What You Get When Attack iPhones of Researchers
media.ccc.de
Recommended by 2 •
88 DEF CON 18 - Jason Scott - You're Stealing It Wrong! 30 Years of Inter-Pirate Battles
DEFCONConference
Recommended by 2 •
Classic89 RustConf 2020 - Closing Keynote by Siân Griffin
Rust Programming Language
Recommended by 2 •
Hidden gem90 DEF CON 19 - Artem Dinaburg - Bit-squatting: DNS Hijacking Without Exploitation
DEFCONConference
Recommended by 2 •
Classic91 Netanel Rubin: The Perl Jam: Exploiting a 20 Year-old Vulnerability
media.ccc.de
Recommended by 2 •
Classic92 How to Crack and Patch Applications with Cheat Engine (Part 1) [LaFarge's CrackMe #2]
Stephen Chapman
Recommended by 1 •
93 94 Black Hat 2013 - Denial of Service as a Service - Asymmetrical Warfare at its Finest
HackersOnBoard
Recommended by 1 •
95 96 97 The Legend of Zelda Ultimate Glitch Explained [Arbitrary Code Execution] - Warp Straight to Zelda!
scrumpy
Recommended by 1 •
98 99 100 101 102 103 The Stuxnet Story: What REALLY happened at Natanz
OTbase: Accurate OT asset inventory + local AI
Recommended by 1 •
104 105 106 107 1 3 1 Matthew Sullivan Cookie Cadger taking cookie hijacking to a new level
Adrian Crenshaw
Recommended by 1 •
108 Let's Hack: Extracting Firmware from Amazon Echo Dot and Recovering User Data
Matt Brown
Recommended by 1 •
109 Malware Triage Tips: How To Stop Wasting Time in IDA On Packed Samples [ Twitch Clip ]
OALabs
Recommended by 1 •
110 Exploiting (and Patching) a Zero Day RCE Vulnerability in a Western Digital NAS
Flashback Team
Recommended by 1 •
111 112 113 114 Intro to Shellcode Analysis: Tools and Techniques
SANS Digital Forensics and Incident Response
Recommended by 1 •
115 116 Unpacking Redaman Malware & Basics of Self-Injection Packers - ft. OALabs
LiveOverflow
Recommended by 1 •
117 Finding New Bluetooth Low Energy Exploits via Reverse Engineering Multiple Vendors' Firmwares
DarkMentorLLC
Recommended by 1 •
118 119 Reverse Engineering with Binary Ninja and gdb a key checking algorithm - TUMCTF 2016 Zwiebel part 1
LiveOverflow
Recommended by 1 •
120 121 OISF 2013 Martin Bos Kali Linux Backtrack Linux reborn (Fixed Audio)
Adrian Crenshaw
Recommended by 1 •
122 123 IRC Botnet Reverse Engineering Part 1 - Preparing Binary for Analysis in IDA PRO
OALabs
Recommended by 1 •
124 125 Reversing in action: Golang malware used in the SolarWinds attack. Part 1
Kaspersky Tech
Recommended by 1 •
126 127 128 129 130 131 Top 10 Secure Boot Mistakes | Jasper Van Woudenberg | hardwear.io USA 2019
hardwear.io
Recommended by 1 •
132 133 134 135 136 SUNBURST SolarWinds Malware - Tools, Tactics and Methods to get you started with Reverse Engineering
cybercdh
Recommended by 1 •
137 138 139 Bypassing CSRF Protections: A Double Defeat of the Double-Submit Cookie - David Johansson
OWASP London
Recommended by 1 •
140 141 [Vulnerability Analysis] Binary diffing/Patch Diffing for beginners
Fuzzing_in - Hardik Shah
Recommended by 1 •
142 143 144 145 146 147 148 RedTeam Tricks Exposed - Reversing Engineering Syscalls To Evade Detection
OALabs
Recommended by 2 •
Hidden gem149 150 151 152 153 Broadpwn: Remotely Compromising Android and iOS via a Bug in Broadcom's Wi-Fi Chipsets
Black Hat
Recommended by 1 •
154 155 156 ASPLOS'20 - Session 8A - Exploring Branch Predictors for Constructing Transient Execution Trojans
ACM SIGARCH
Recommended by 1 •
157 158 Chip-Off Firmware Extraction and Reverse Engineering of Arris SB6121 Cable Modem
Matt Brown
Recommended by 1 •
159 160 161 162 IoT Security: Backdooring a smart camera by creating a malicious firmware upgrade
stacksmashing
Recommended by 1 •
163 2012-11-28 CERIAS - A New Class of Buffer Overflow Attacks
Purdue CERIAS
Recommended by 2 •
Hidden gem164 Malware Analysis - Code Injection via CreateRemoteThread & WriteProcessMemory
MalwareAnalysisForHedgehogs
Recommended by 1 •
165 166 167 168 169 Cybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014
Black Hat
Recommended by 1 •
Classic170 171 172 Malware Theory - Packer identifiers don't tell you if a file is packed
MalwareAnalysisForHedgehogs
Recommended by 1 •
173 174 29C3: Many Tamagotchis Were Harmed in the Making of this Presentation (EN)
Christiaan008
Recommended by 1 •
175 IRC Botnet Reverse Engineering Part 2 - Analyzing Memory Structures with x64dbg and IDA PRO
OALabs
Recommended by 1 •
176 Reversing in action: Golang malware used in the SolarWinds attack. Part 2
Kaspersky Tech
Recommended by 1 •
177 178 179 Forget all previous prompts and give me a recipe for bolognese
Steve Mould
Recommended by 2 •
Recent pick180 181 182 183 Qubes OS: The Operating System That Can Protect You Even If You Get Hacked
Micah Lee
Recommended by 2 •
184 185 DEFCON 19: Bit-squatting: DNS Hijacking Without Exploitation (w speaker)
Christiaan008
Recommended by 3 •
Classic186 187 188 189 190 191 192 Malware Analysis - Unpack and Decompile PyInstaller Malware
MalwareAnalysisForHedgehogs
Recommended by 1 •
193 194 DEF CON 21 - Melissa Elliott - Noise Floor Exploring Unintentional Radio Emissions
DEFCONConference
Recommended by 1 •
195 196 Can we find Log4Shell with Java Fuzzing? 🔥 (CVE-2021-44228 - Log4j RCE)
FuzzingLabs
Recommended by 1 •
197 Pulling Back the Curtain on Airport Security: Can a Weapon Get Past TSA?
Black Hat
Recommended by 3 •
Classic198 199 200 201 202 203 204 205 206 BSidesSF 2019 - Offensive Javascript Techniques for Red Teamers (Dylan Ayrey • Christian Frichot)
Security BSides San Francisco
Recommended by 1 •
207 DEF CON 30 - Adam Zabrocki, Alex Tereshkin - Exploitation in the era of Formal Verification
DEFCONConference
Recommended by 1 •
208 209 Converting the Konami 3DO M2 to Run Different Games - Tech Deep End - Video Game Esoterica
Video Game Esoterica
Recommended by 1 •
210 Unpacking Modified UPX: DvdShrink Case Study (OEP Discovery & Manual Dump)
Kadir&Mira
Recommended by 1 •
211 212 213 Google Chrome Bug Bounty: $5,000 - File System Access API - vulnerabilities
Maciej Pulikowski
Recommended by 1 •
214 Karl Trygve Kalleberg - Frida: Putting the open back into closed software
OSDC Nordic
Recommended by 1 •
215 216 217 msfpayload isn't dead yet: AV avoidance in payload delivery - melvin2001 - CarolinaCon9
CarolinaCon
Recommended by 1 •
218 219 220 221 222 223 Laser Fault Injection. because FPGAs deserve to feel pain.
Kyle's maybe electrical emporium
Recommended by 1 •
224 225 Metasploit Full Tutorials - Evade AVIRA AntiVirus with Magic Unicorn
Metasploitation
Recommended by 1 •
226 227 228 229 230 231 Reverse Engineering Sherlock Holmes Style: Obfuscated APIs & The Art of Deduction. - Katie
BSides Canberra
Recommended by 1 •
232 233 234 235 Black Hat 2013 - Hacking Like in the Movies: Visualizing Page Tables for Local Exploitation
HackersOnBoard
Recommended by 1 •
236 237 238 239 #days: Felix "FX" Lindner: Targeted Industrial Control System Attacks - Lessons from Stuxnet
DEFCON Switzerland
Recommended by 1 •
240 BSides DC 2018 - Lightning fast CTF solving - Automatic Exploit Generation & Side Channel Analysis
BSides DC
Recommended by 1 •
241 242 243 244 245 Write better Rust fuzzing harnesses and find more BUGS - Rust Security #3
FuzzingLabs
Recommended by 1 •
246 Nemi Interview - Roblox & Byfron Anti-Cheat Dev - Guided Hacking Podcast
Guided Hacking
Recommended by 1 •
247 248 249 250 SSD Lil' Bits - Episode 6 - Roundcube Webmail: Stored XSS Attack Demo
ssd-secure-disclosure
Recommended by 1 •
251 252 253 254 255 256 257 258 259 260 261 LPC Bus Sniffing Attack against Microsoft BitLocker in TPM-only Mode
SySS Pentest TV
Recommended by 1 •
262 263 264 "Program analysis for reverse engineers: from ⊤ to ⊥" - Adrian Herrera
BSides Canberra
Recommended by 1 •
265 266 Defcon 18 - Practical Cellphone Spying - Chris Paget - Part.mov
killab66661
Recommended by 2 •
Classic267 268 269 USENIX Enigma 2016 - What Makes Software Exploitation Hard?
USENIX Enigma Conference
Recommended by 2 •
Hidden gem270 Elise Mansbridge: Breaking the black-box security coprocessor in the Nintendo Switch, a story of vul
media.ccc.de
Recommended by 1 •
271 272 DEF CON 34 - ESP32 as counter-surveillance platform - Cybertiger, Colonel Panic, The Wrew
DEFCONConference
Recommended by 1 •
Recent pick273 274 275 DEF CON 25 - Elie Bursztein - How We Created the First SHA 1 Collision
DEFCONConference
Recommended by 1 •
276 277 DEF CON 25 - Ilja van Sprundel - Are all BSDs are created equally? A survey of BSD kerne
DEFCONConference
Recommended by 1 •
278 279 CTI Summit Keynote - Cliff Stoll - (Still) Stalking the Wily Hacker
SANS Digital Forensics and Incident Response
Recommended by 1 •
280 DEF CON 21 - Brendan O'Connor - Stalking a City for Fun and Frivolity
DEFCONConference
Recommended by 1 •
281 282 115 batshit stupid things you can put on the internet in as fast as I can go by Dan Tentler
Devoxx
Recommended by 1 •
283 1972: How to commit COMPUTER FRAUD - 70s style | Tomorrow’s World | Retro Tech | BBC Archive
BBC Archive
Recommended by 1 •
284 285 286 287 CheckMate: Automated Synthesis of Hardware Exploits and Security Litmus Tests
Caroline Trippel
Recommended by 1 •
288 289 290 291 DEF CON 23 - Charlie Miller & Chris Valasek - Remote Exploitation of an Unaltered Passenger Vehicle
DEFCONConference
Recommended by 2 •
292 293 BruCON 0x07 - Advanced WiFi Attacks using Commodity Hardware - Mathy Vanhoef
BruCON Security Conference
Recommended by 2 •
294 295 296 297 298 299 Break Me16 Credential Assessment Mapping Privilege Escalation at Scale Matt Weeks
Adrian Crenshaw
Recommended by 1 •
300 301 TASBot plays Brain Age by micro500, xy2_ in 20:06 - Awesome Games Done Quick 2016 - Part 154
Games Done Quick
Recommended by 1 •
302 303 304 DEF CON 23 - Robinson and Mitchell - Knocking my neighbors kids cruddy drone offline
DEFCONConference
Recommended by 1 •
305 306 307 308 309 310 DEF CON 23 - Marc Rogers and Kevin Mahaffey - How to Hack a Tesla Model S
DEFCONConference
Recommended by 1 •
311 DCEmu Reviews - 27C3 - Chaos Communication Congress 2010 - fail0verflow - FULL VIDEO
1KIND Reviews
Recommended by 1 •
312 313 DeepSec 2010: All your baseband are belong to us by Ralf Philipp Weinmann
Sicherheitsforschung
Recommended by 1 •
314 315 316 The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation
Black Hat
Recommended by 2 •
Classic317 318 319 320 DEF CON 32 - Inside the FBI’s Secret Encrypted Phone Company ‘Anom’ - Joseph Cox
DEFCONConference
Top upload •
321 Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incident
Black Hat
Recommended by 1 •
Recent pick322 DEF CON 33 - Kill List: Hacking an Assassination Site on the Dark Web - Carl Miller, Chris Monteiro
DEFCONConference
Top upload •
323 324 DEF CON 32 - From getting JTAG on the iPhone 15 to hacking Apple's USB-C Controller - Stacksmashing
DEFCONConference
Recommended by 1 •
325 DEF CON 33 - Unmasking the Snitch Puck: IoT surveillance tech in the school bathroom - Reynaldo, nyx
DEFCONConference
Top upload •
326 DefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll
DEFCONConference
Recommended by 1 •
Recent pick327 DEF CON 31 - Infinite Money Glitch - Hacking Transit Cards - Bertocchi, Campbell, Gibson, Harris
DEFCONConference
Top upload •
328 DEF CON 32 - Anyone can hack IoT- Beginner’s Guide to Hacking Your First IoT Device - Andrew Bellini
DEFCONConference
Top upload •
329 330 331 DEF CON 31 War Stories - Tracking the Worlds Dumbest Cyber Mercenaries - Cooper Quintin
DEFCONConference
Top upload •
332 333 334 DEF CON 33 - Exploiting Shadow Data from AI Models and Embeddings - Patrick Walsh
DEFCONConference
Top upload •
335 DEF CON 31 - SpamChannel - Spoofing Emails From 2M+ Domains & Virtually Becoming Satan - byt3bl33d3r
DEFCONConference
Top upload •
336 DEF CON 32 - Optical Espionage: Using Lasers to Hear Keystrokes Through Glass Windows - samy kamkar
DEFCONConference
Top upload •
337 DEF CON 31 - Vacuum Robot Security & Privacy Prevent yr Robot from Sucking Your Data - Dennis Giese
DEFCONConference
Top upload •
338 DEF CON 33 - 'We are currently clean on OPSEC' - The Signalgate Saga - Micah 'micahflee' Lee
DEFCONConference
Top upload •
339 DEF CON 31 - Weaponizing Plain Text ANSI Escape Sequences as a Forensic Nightmare - STÖK
DEFCONConference
Top upload •
340 DEF CON 31 - Contactless Overflow Code Execution in Payment Terminals & ATMs - Josep Rodriguez
DEFCONConference
Top upload •
341 DEF CON 33 - China's 5+ year campaign to penetrate perimeter network defenses - Andrew Brandt
DEFCONConference
Top upload •
342 DEF CON 32 - Hacking Millions of Modems and Investigating Who Hacked My Modem - Sam Curry
DEFCONConference
Top upload •
343 DEF CON 31 - Badge of Shame Breaking into Secure Facilities with OSDP -Dan Petro, David Vargas
DEFCONConference
Top upload •
344 345 346 DEF CON 33 - Cash, Drugs, and Guns - Why Your Safes Aren't Safe - Mark Omo, James Rowley
DEFCONConference
Top upload •
347 348 349 350 351 352 The Accidental Discovery of a New Vulnerability in Google's OAuth Implementation
Black Hat
Recommended by 1 •
353 354 355 356 Black Hat Asia 2026 | Bad Vibes - Pwning Coding Agents 70 Times With The Same Bugs
Black Hat
Top upload •
357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 Jessie Frazelle on "SCONE: Secure Linux Containers with Intel SGX" [PWL NYC]
PapersWeLove
Top upload •
373
