Black Hat Courses

Invisibility Purge - Unmasking the Dormant Events of Invisible Web Controls

Unmasking dormant events in server web controls through refined methodology and new tool, bypassing security measures to exploit hidden application features.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Let's Play - Applanting

Discover a new attack methodology called APPLANTING, which allows attackers to install apps on Android devices without user knowledge, combining CSRF and clickjacking techniques.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Hybrid Defense - How to Protect Yourself From Polymorphic 0-days

Hybrid approach for early detection of unknown 0-day exploits at network level, combining shellcode detection algorithms to optimize classification, reduce false positives, and increase throughput.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

The Deputies Are Still Confused

Exploring misunderstandings and vulnerabilities in same-origin policy, with practical examples of attacks bypassing common content-isolation mechanisms for CSRF, clickjacking, and NTLM protection.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Hardening Windows 8 Apps for the Windows Store

Explore security considerations for Windows 8 Store apps, covering HTML5, backend services, cloud computing, and WinRT to ensure robust and privacy-focused mobile development.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Honeypot That Can Bite - Reverse Penetration

Explore aggressive honeypot techniques for de-anonymizing attackers, assessing skill levels, and gaining control. Learn real-world applications and effectiveness through case studies and practical examples.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Next Generation Mobile Rootkits

Explore advanced mobile rootkit techniques using ARM TrustZone, including implementation, hiding methods, and lessons learned from creating an actual rootkit.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Multiplayer Online Games Insecurity

Explore vulnerabilities in multiplayer online games, including game-specific issues, Steam Browser Protocol security, and a new 0-day vulnerability in a popular game.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Hacking Video Conferencing Systems

Explore vulnerabilities in high-end videoconferencing systems, focusing on Polycom HDX devices. Learn about firmware analysis, device rooting, and remote exploitation techniques for H.323 protocol.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

SSL Future Authenticity

Exploring SSL's history, current authenticity issues, recent infrastructure attacks, and potential solutions, with a focus on fixing trust relationships in this fundamental protocol.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Floating Car Data from Smartphones

Exploring smartphone-based traffic data: privacy implications, location tracking, and potential vulnerabilities in navigation systems. Presents a protocol to enhance security and protect user privacy.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Harnessing GPUs - Building Better Browser Based Botnets

Explore browser-based botnets using GPUs for powerful computations. Learn about XSS, HTML5, and WebGL techniques to create efficient, cross-platform botnets capable of breaking strong encryption and impacting cybersecurity.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Web Application Brute Forcing 101

Learn techniques for web application brute forcing, exploring vulnerabilities and security measures to protect against unauthorized access attempts.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Phase II - 2nd Generation Honeynet Technologies

Explore cutting-edge advancements in honeypot technologies for enhanced cybersecurity. Learn about innovative techniques to detect and analyze network intrusions from industry experts.

• YouTube
• 1 hour 30 minutes
• Self-Paced
• Conference Talk

Security Aspects in Java Bytecode Engineering

Explore security vulnerabilities in Java bytecode and learn techniques for bytecode engineering to enhance application security.

• YouTube
• 1 hour 20 minutes
• Self-Paced
• Conference Talk