zerodaytraining

🍒New masterclass: JavaScript Engines Vulnerabilities https://zerodayengineering.com/training/masterclass/browser-security-nightly.html#jsevulns 19th August 2023, 13-17 UTC (4 hours) Building up on our previous masterclass: JavaScript Engines Internals (https://zerodayengineering.com/training/masterclass/browser-security-nightly.html#jsinternals), this time we'll look exclusively at JS engine vulnerabilities and what to do with them -- with @alisaesage Details and booking: https://zerodayengineering.com/training/masterclass/browser-security-nightly.html#jsinternals

And for those of you already thinking two steps ahead, you can take a month to internalize HVR and then take the Advanced Hypervisor Exploitation training in November: https://zerodayengineering.com/training/advanced-hypervisor-exploitation.html

⚡️Next big thing on our schedule: Hypervisor Vulnerability Research training! https://zerodayengineering.com/training/hypervisor-vulnerability-research.html This once-per-year live online session with @alisaesage is for those of you who chose to wait for it over (or even after!) grabbing the self-paced package of the same course. The opportunity to engage directly and ask questions to an experienced researcher at the top of their game is priceless, even if it takes a commitment of four days of tough fast-paced learning. In this training we make use of time-pressured exercises to pack a many-years worth of knowledge and start the momentum over a set of mission-critical skills. Abstract models that we rely on were created from scratch by @alisaesage by way of studying hundreds of real vulnerabilities in hypervisors, reverse engineering multiple hypervisor products, and generalizing the Big Picture from instance data. You won’t find it elsewhere in books or on the internet, unless it has been borrowed from this training. (Btw, let me know if you ever see such a ‘borrow’ with no source reference — that is legally punishable). A strong and exclusive focus on vulnerability research in it (exploit development not included) ensures that you’ll learn most effectively and get up to speed fast. As some of our past students suggested, this is probably the best training course in the industry on hypervisor and virtualization security — I am now humbly pondering if that might be true indeed. ⏰ 24-25-26-27th July 2023, 09-17 UTC P.S. Early rate will close soon — book soon if you need it: https://zerodayengineering.com/training/hypervisor-vulnerability-research.html

In progress…

☀️ Private community for our students is now available. If you have previously attended our training or masterclass, contact me @zerodayengineering to join

💫 New masterclass: JavaScript Engines for Hackers A gentle introduction to inner workings and security trends of JavaScript engines for purposes of professional vulnerability research and arbitrary curiousity. Implementation case study and practicals will be on Google v8. Class time will be split in two parts: general and v8. General part will focus on fundamental abstract models and trends that are shared between all JavaScript engines. Such models allow us to study specific implementations with a prepared mind, and predict things about unfamiliar code that we technically can not know. Second part will take Google's v8 javascript engine as a case study, and focus on fundamental implementation aspects of it - think objects, shapes, and bytecodes - while excluding higher level machinery such as specific compilers or optimizations, whose code is more transient. Total up to 50% practical labs and exercises, as usual. Where: Live/online on June 17th, 2023 (Saturday), 09-13 UTC Instructor: Alisa Esage Further information and booking: https://zerodayengineering.com/training/masterclass/javascript-security-nightly.html#intro