Black Hat Courses

Hacking with WebSockets

Explore WebSocket vulnerabilities, privacy implications, and security risks. Learn to deploy WebSockets securely and use them in hacking frameworks. Gain insights into HTML5 security challenges.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

HTML5 Top 10 Threats - Stealth Attacks & Silent Exploits

Explores top 10 HTML5 security threats, including CORS attacks, clickjacking, XSS, web storage vulnerabilities, and more. Demonstrates real-life examples and discusses defense strategies against emerging attack vectors.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

The Info Leak Era on Software Exploitation

Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Digging Deep Into the Flash Sandboxes

Explore Flash Player sandbox implementations, their architectures, mechanisms, and security limitations. Learn about potential vulnerabilities and sandbox escape techniques in this in-depth analysis.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Here Be Backdoors - A Journey into the Secrets of Industrial Firmware

Exploring vulnerabilities in industrial control systems through firmware analysis, revealing backdoors and security flaws in critical infrastructure devices like PLCs, smart meters, and SCADA systems.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

When Security Gets in the Way - Pen Testing Apps That Use Certificate Pinning

Explore tools and techniques for defeating certificate pinning in mobile apps during black-box testing, enabling interception of SSL traffic on both iOS and Android platforms.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

How Many Bricks Does It Take to Crack a Microcell

Journey through reverse engineering a 3G microcell, covering hardware hacking, kernel reversing, firmware manipulation, software reversing, networking, memory forensics, and social engineering. Insights into successes, failures, and lessons learned.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Hacking the Corporate Mind - Using Social Engineering to Improve Organizational Security Acceptance

Discover social engineering techniques to improve organizational security acceptance, bridging the gap between users and InfoSec teams for better awareness and policy adherence.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

PinPadPwn

Explore vulnerabilities in payment terminals, including memory corruption issues and potential attack vectors. Learn about code execution risks and discuss profitable payloads for attackers.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Windows Phone 7 Internals and Exploitability

Comprehensive analysis of Windows Phone 7 security, revealing hidden internals through reverse engineering. Explores potential vulnerabilities and exploitation techniques in the OS and vendor customizations.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Hardware Backdooring is Practical

Explores hardware backdooring through Rakshasa malware, demonstrating permanent BIOS infection, NX bit disabling, and security lowering across various motherboards using open-source components like Coreboot.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

SSRF vs Business Critical Applications

Explore SSRF vulnerabilities in business-critical applications, focusing on SAP systems. Learn about XXE Tunneling and its potential to bypass security restrictions, with practical examples and attack scenarios.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Recent Java Exploitation Trends and Malware

Explore recent Java vulnerabilities, exploitation techniques, and malware trends. Learn about sandbox evasion, multi-platform attacks, and challenges in analyzing obfuscated Java exploits.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

CuteCats.exe and the Arab Spring

Analysis of malware targeting activists during Middle Eastern uprisings, exploring distribution methods and impact on digital dissent and online communities.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Smashing the Future for Fun and Profit

Visionary security experts discuss emerging threats, technological shifts, and societal impacts on cybersecurity over the next 15 years, offering insights into future challenges and opportunities in the field.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk