Foundations
File Format Exploitation & Defense
From bits and bytes to cybercrime hunters — a practical, ethical journey through offensive techniques and the defenses that stop them.
Course SectionPractical Networking for Cyber Defense
VPN, Tor, Routing, NAT, DNS, TLS, Firewalls, BGP — a hands-on path to think like an attacker and build like a defender.
Course SectionMobile Device Security
Practical iOS & Android security: OS hardening, app security, secure comms (NFC/BLE/Wi-Fi/Cell), biometrics, hardware roots of trust, reverse engineering, malware analysis, privacy, forensics.
Course SectionSecure-by-Design with PKI & Asymmetric Cryptography
Designing and operating trust at scale: PKI fundamentals, smart cards (eID/ICAO), eSIM provisioning, vehicle security, access control, and biometric CCTV — with privacy and safety baked in.
WorkshopSteganography, Cryptography, ZKP, PSI & More — Visual Primer
Short, visual explanations of foundational privacy & security schemes. Each section uses concise text and animated SVGs to build intuition you can carry into labs.
Course SectionSupply Chain Security
Modern software depends on third-party code, build systems, and distribution pipelines. Attackers exploit weak links to inject malicious code, steal secrets, or hijack updates. This section explores how to harden the software supply chain.
Course SectionHuman Factor & Social Engineering Defense
Technology alone isn’t enough — attackers exploit people. This section teaches how social engineering works and how to build resilient defenses through awareness, processes, and layered controls.
Mobile
Android Camera Internals & Frida Anti-Spoofing
From hardware pipelines → Android Camera APIs → live instrumentation with Frida → countermeasures to prevent camera spoofing.
WorkshopiOS Camera Internals & Anti-Spoofing (AVFoundation + Frida)
Understand iPhone camera hardware, Apple’s capture stack (AVFoundation/ARKit/Vision), how attackers try to inject/replace frames on jailbroken devices, and how to harden your apps with layered defenses.
Desktop applications
Windows Desktop Application Security
Understanding Win32, .NET, and UWP/WinUI security models, memory access, inter-process communication, system services, networking, and how apps leak sensitive data. Focus on ethical reverse engineering and defenses.
WorkshopmacOS Desktop Application Security — Deep Dive
Understand macOS security primitives (codesigning, sandbox, TCC, Hardened Runtime), how apps access RAM, screen and remote control surfaces, secure storage, networking, and how to analyze & remediate data leakage — all in a lawful lab context.
WorkshopLinux Desktop Application Security — Deep Dive
Kernel → userland security model, memory/process access, sandboxing (namespaces/seccomp/LSM), screen/remote control surfaces, secrets storage, networking, and responsible leak analysis — all in a lawful lab context.
WorkshopChromium & HTTPS: In-Process Threats and Defenses (Linux · macOS · Windows)
Understand how HTTPS is handled inside Chromium, the risks if an attacker can execute code alongside the browser, and how to harden, monitor, and respond — with safe, ethical lab exercises.
WorkshopChromium Request Instrumentation — Cross-Platform (Linux · macOS · Windows)
Ethical lab techniques to observe Chromium’s outbound requests by injecting your own library, plus a safe baseline via the Chrome DevTools Protocol. Covers process model, platform caveats, and defenses.
MasterclassUltimate Course — DRM & Anti-Screen Capture Hardening (Web + Windows + macOS + Linux)
Build layered defenses against screenshots, screen sharing, and desktop scraping. We’ll combine DRM, secure rendering paths, OS APIs, watermarking, policy, and monitoring. Goal: make abuse impractical, detectable, and sanctionable — while acknowledging platform limits.
Web & authentication
Modern Auth Deep Dive — OAuth 2.0 · OpenID Connect · WebAuthn · HTTP Basic
End-to-end mental models with animated diagrams and concise code snippets. Focus on secure defaults (PKCE, same-site cookies, token lifetime/rotation) and when to choose each scheme.
WorkshopWeb App Reverse Engineering — Foundations
Map modern web apps end-to-end (browser ⇄ APIs ⇄ storage), read minified bundles, instrument runtime safely, and reproduce requests in a lab environment to improve defenses.
WorkshopWeb Fingerprinting: Techniques & Countermeasures
How sites derive a stable identity from browsers and devices, how attackers evade it, and how defenders can use it responsibly with privacy-preserving design.
WorkshopWeb Anti-Botfarm Techniques & Counter-Automation
Explore how large-scale botfarms operate (headless browsers, mobile device farms, API abuse), then learn layered detection & defense strategies to protect web applications.
Identity, KYC & privacy
KYC → Privacy-Preserving Tokens (PPTs): User-Centric Identity
How to evolve legacy KYC into user-owned, privacy-preserving credentials and tokens. We compare adoption paths (incumbents vs new entrants), show issuance/redemption flows, revocation, risk, and UX trade-offs — always from the end user’s side.
MasterclassPrivacy-Preserving Tokens + Blockchains for Next-Gen KYC Vendors
Technical deep dive into building user-centric KYC with privacy-preserving tokens (PPTs), verifiable credentials, and ledger anchoring. We cover standards, browser/device capabilities, issuance/presentation/revocation/recovery flows, and pragmatic architecture choices.
MasterclassAI/ML Security for KYC & Identity Verification — Deep Dive & Improvements
Design resilient, privacy-preserving identity verification: document checks, face match, liveness/PAD, device integrity, fraud orchestration, and continuous improvement loops. Focused on defenses and practical upgrades.