Black Hat Courses

Probing Mobile Operator Networks

Explore techniques for probing cellular networks, uncovering diverse connected devices, and discussing security implications of findings from network investigations.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Hookin Ain't Easy - BeEF Injection with MITM

Explore browser exploitation techniques using MITM attacks and the BeEF Framework. Learn to hook browsers without social engineering or XSS, and maintain connections for advanced penetration testing.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

The Defense Rests - Automation and APIs for Improving Security

Explore automation and APIs for enhancing security through centralized management, testing, and evidence-driven approaches. Learn to leverage open-source tools and protocols for efficient vulnerability detection and faster recovery.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Exchanging Demands

Explore vulnerabilities in Microsoft Exchange's mobile device management, focusing on remote wipe functionality and potential exploitation through policy updates without authentication.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Control-Alt-Hack - White Hat Hacking for Fun & Profit

Explore ethical hacking through a card game that simulates security audits and consulting. Learn about diverse hacking skills, mission challenges, and cybersecurity concepts in an engaging, entertaining format.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Libinjection - A C Library for SQLI Detection and Generation Through Lexical Analysis

Innovative C library for SQL injection detection using lexical analysis, offering high precision and accuracy. Trained on real attacks, it categorizes threats and provides templates for new attack detection.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

State of Web Exploit Toolkits

Deep dive into popular web exploit toolkits, analyzing construction, shellcodes, obfuscations, and exploits. Explore trends, data harvesting methods, and emerging players in cybercriminal landscape.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Intrusion Detection Along the Kill Chain - Why Your Detection System Sucks

Explore advanced intrusion detection techniques using the attacker plane and kill chain concepts to improve cybersecurity effectiveness beyond traditional vendor solutions.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Passive Bluetooth Monitoring in Scapy

Explore passive Bluetooth monitoring in Scapy using Python extensions and Ubertooth dongle, enabling interactive observation and development of Bluetooth auditing and pentesting tools.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Web Tracking For You

Explore advanced web tracking techniques for identifying and monitoring potential security threats, covering active and passive fingerprinting, user unmasking, and cross-platform implementation.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

iOS Kernel Heap Armageddon Revisited

Explora técnicas avanzadas de explotación del heap del kernel de iOS, incluyendo ataques a metadatos, objetos C++ y control del heap, con énfasis en nuevos métodos más allá de la lista libre.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Still Passing the Hash 15 Years Later - Using Keys to the Kingdom to Access Data

Explore Windows authentication vulnerabilities and learn how password hashes can be exploited to access sensitive data across various enterprise services, even 15 years after discovery.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

SQL Injection to MIPS Overflows - Rooting SOHO Routers

Explore SQL injection techniques to exploit buffer overflows and gain root access to Netgear routers, including file extraction and live demonstration of vulnerabilities in SOHO devices.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Ghost is in the Air - Traffic - Security Aspects of ADS-B and "Flying" Technology

Explore security vulnerabilities in ADS-B technology and potential threats to air traffic control systems, including practical demonstrations of data injection and visualization techniques.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Legal Aspects of Cyberspace Operations

Explore legal frameworks for cyberspace operations, including network security, defense, exploitation, and attack. Gain insights into recent incidents and their legal classifications.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk