Black Hat Courses

Isolation or Hallucination - Hacking AI Infrastructure Providers for Fun and Weights

Explore critical security vulnerabilities in AI-as-a-Service platforms, examining novel attack techniques that compromise data privacy and infrastructure security across major providers like Hugging Face and Replicate.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Novel Email Spoofing Attack Patterns - Bypassing SPF, DKIM, and DMARC Security Protocols

Uncover groundbreaking email spoofing techniques that bypass SPF, DKIM, and DMARC protocols, affecting millions of domains, and learn defensive strategies to protect against these sophisticated inbox vulnerabilities.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Setting Standards Against Information Threats - Cybersecurity Response to MDM

Explore how to establish effective standards and taxonomies for combating mis/dis/malinformation (MDM) threats, drawing from Maricopa County's practical experience in threat intelligence and reporting.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

From Exploits to Forensics Evidence - Unraveling the Unitronics Attack

Dive into a forensic analysis of the CyberAveng3rs' attack on Unitronics PLCs, exploring vulnerability research, exploit development, and incident response techniques for industrial control systems.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Foreign Information Manipulation and Interference - Understanding Disinformation 2.0

Explore modern disinformation tactics and foreign manipulation techniques through NATO case studies, examining AI's role, social media exploitation, and evolving strategies to undermine democratic institutions.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Flipping Bits - Credential Harvesting Through Domain Bitflip Attacks

Explore how bit-flipping attacks on domain names can lead to credential harvesting, featuring the 'Certainly' tool for red-team engagements and essential defensive strategies against DNS exploitation.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Driving Forces Behind Industry 4.0 and Digital Transformation for Critical Infrastructure

Explore how digital transformation revolutionizes critical infrastructure, focusing on resilience, reliability, and cybersecurity in the shift from analog to virtualized systems for enhanced energy delivery.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

LinkDoor - A Hidden Attack Surface in the Android Netlink Kernel Modules

Explore Netlink vulnerabilities in Android kernel modules, uncovering security threats and exploitation techniques. Learn to analyze and mitigate risks in this overlooked attack surface.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Securing Our Cyberspace Together

Explore cybersecurity strategies with Singapore's Commissioner of Cybersecurity. Gain insights on national cyber defense, policy development, and international collaboration for a secure digital future.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

Unveiling the Cracks in Virtualization - VMware Workstation Escape

Explore VMware Workstation vulnerabilities, focusing on USB controller exploits. Learn about information leakage, arbitrary read/write, and bypassing Windows protections in virtualization escapes.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

URB Excalibur - New VMware All-Platform VM Escapes

Unveils groundbreaking research on VMware hypervisor vulnerabilities, focusing on virtual USB controllers. Demonstrates novel VM escape techniques using URB, showcasing a critical heap out-of-bounds write vulnerability across all VMware platforms.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Escaping Modern Web-Based App Sandboxes - Site Isolation Vulnerabilities

Explore Chrome's site isolation vulnerabilities in web-based apps, revealing how attackers can bypass security measures to execute malicious actions and compromise user data.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

The Key to Remote Vehicle Control - Autonomous Driving Domain Controller

Explore security risks in autonomous driving controllers, including hardware structure, testing methods, and potential vulnerabilities. Learn to extract AI models and control vehicles remotely.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

The Dark Side of EDR - Repurposing EDR as an Offensive Tool

Explore innovative attack vector transforming EDR into stealthy malware. Learn to bypass security features, exfiltrate data, and establish persistent control, focusing on Palo Alto Networks Cortex XDR.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

The Fault in Our Metrics - Rethinking How We Measure Detection and Response

Rethinking cybersecurity metrics: Learn to develop meaningful measurements for detection and response capabilities, avoiding pitfalls of traditional metrics and motivating teams effectively.

• YouTube
• 41 minutes
• Self-Paced
• Free Video