Black Hat Courses

Building Robust Backdoors in Secret Symmetric Ciphers

Explore techniques for creating undetectable backdoors in symmetric ciphers, examining historical cases and discussing innovative approaches to cryptographic vulnerabilities.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Ozone HIPS - Unbreakable Windows

Explore cutting-edge Host Intrusion Prevention System technology for Windows, enhancing system security and resilience against cyber threats.

• YouTube
• 1 hour 18 minutes
• Self-Paced
• Conference Talk

Announcing OWASP Guide to Securing Web Applications & Services 2.0

Comprehensive guide to securing web applications and services, covering best practices, vulnerabilities, and mitigation strategies for developers and security professionals.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

The Art of Defiling - Defeating Forensic Analysis

Explore advanced techniques for evading forensic analysis and protecting digital privacy in this comprehensive cybersecurity presentation by The Grugq.

• YouTube
• 1 hour 17 minutes
• Self-Paced
• Conference Talk

Advanced SQL Injection in Oracle Databases

Explore advanced SQL injection techniques in Oracle databases, focusing on vulnerabilities, exploitation methods, and defensive strategies for database security professionals.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

NX - How Well Does It Say NO to Attacker's Execution Attempts

Explore the effectiveness of NX technology in preventing attacker execution attempts, analyzing its strengths and potential vulnerabilities in cybersecurity defense.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The Myth of Twelve More Bytes - Security on Post-Scarcity Internet

Exploring security implications of IPv6, DNSSEC, and new top-level domains on enterprise IT, fraud prevention, and network defense in the evolving Internet landscape.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Scaling Up Baseband Attacks - More Unexpected Attack Surface

Exploring unexpected attack vectors in baseband processors, revealing vulnerabilities in cellular network communication and GPS systems that can be exploited remotely over IP connections.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

ModSecurity as Universal Cross-Platform Web Protection Tool

Explore ModSecurity's evolution into a cross-platform WAF, its early attack detection capabilities, and its use of OWASP Core Rule Set for protecting Apache, IIS, and nginx servers.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Looking into the Eye of the Meter

Explore smart meter vulnerabilities, from memory acquisition to hardware sniffing. Learn about authentication credential theft and IR port interaction techniques used by criminals targeting utility infrastructure.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Windows 8 Heap Intervals

Explore Windows 8 heap exploitation techniques, memory management changes, and security features. Learn about user-land and kernel-land perspectives, allocation processes, and mitigation strategies.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

The Christopher Columbus Rule and DHS

Explore DHS's innovative cybersecurity initiatives, including threat information sharing, research funding, and career opportunities in this talk by Deputy Under Secretary Mark Weatherford.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The Subway Line 8 - Exploitation of Windows 8 Metro Style Apps

Exploring Windows 8 Metro-style app security, AppContainer sandbox, and potential vulnerabilities. Demonstrates techniques to bypass security measures and access restricted resources.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Trust, Security, and Society

Explore trust in society, its importance, and various systems to maintain it. Delve into societal pressures, cooperation strategies, and challenges in our interconnected world.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

We Have You by the Gadgets

Explore Windows gadget platform vulnerabilities and attack vectors. Learn about creating malicious gadgets, exploiting legitimate ones, and uncovering flaws in published gadgets.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk