Black Hat Courses

Easy Local Windows Kernel Exploitation

Discover reliable techniques for exploiting common local Windows kernel vulnerabilities across multiple versions, including previously challenging exploits.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Torturing OpenSSL

Explore hardware vulnerabilities in secure systems through a side-channel attack on RSA signatures, demonstrating how induced faults can compromise software-secure systems and extract private keys.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Sexy Defense - Maximizing the Home-field Advantage

Proactive defense strategies: intelligence gathering, modeling, and expanding defender roles. Maximize existing resources for effective security posture against penetration testers and red teams.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

PRNG Pwning Random Number Generators in PHP Applications

Techniques for exploiting randomness vulnerabilities in PHP applications, focusing on password reset token predictability and demonstrating account takeover through PRNG prediction.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

How Analysis of EC Consumption of Embedded Systems Could Lead to Code Reversing

Practical approach to reverse engineering embedded systems through power analysis. Explores experimental protocol, tools, and techniques for extracting code without physical access to internal components.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Exploiting the Jemalloc Memory Allocator - Owning Firefox's Heap

Explore jemalloc memory allocator's architecture, attack vectors, and novel exploitation techniques, focusing on Mozilla Firefox's heap and its security implications.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Targeted Intrusion Remediation - Lessons From The Front Lines

Explore strategies for combating persistent cyber threats, focusing on inhibiting attacker activities, enhancing detection capabilities, and improving rapid response techniques for effective intrusion remediation.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Owning Bad Guys and Mafia with Javascript Botnets

Explore mitm attacks on anonymous services and learn to create JavaScript botnets for analyzing connections, uncovering activities of malicious actors behind these services.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Don't Stand So Close To Me - An Analysis of the NFC Attack Surface

Explora la seguridad de NFC en dispositivos móviles, analizando protocolos, vulnerabilidades y posibles ataques. Incluye demostraciones prácticas de explotación y recomendaciones para mejorar la protección.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Exploit Mitigation Improvements in Windows 8

Explore Windows 8's advanced security features and exploit mitigation improvements, including enhanced ASLR, heap protection, and kernel safeguards, designed to thwart modern attack techniques.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

File Disinfection Framework - Striking Back at Polymorphic Viruses

Explore an open-source framework for combating polymorphic viruses through advanced static analysis and emulation. Learn innovative techniques for file disinfection, malware analysis, and incident response.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Find Me in Your Database - An Examination of Index Security

Explore Oracle indexing architecture, new flaws, and forensic aspects. Learn to identify issues in custom applications and understand the security implications of database indexing.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Errata Hits Puberty - 13 Years of Chagrin

Exploring the attrition.org Errata project's 13-year journey as an IT and security industry watchdog, including insights into its history, process, impact, and future direction.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

eEye BootRoot

Explore advanced rootkit techniques and boot-level system manipulation with eEye BootRoot, presented by security experts Derek Soeder and Ryan Permeh.

• YouTube
• 2 hours 2 minutes
• Self-Paced
• Conference Talk

Attacking Web Services - Next Generation of Vulnerable Enterprise Apps

Explore vulnerabilities in enterprise web services and learn advanced techniques for identifying and exploiting security flaws in next-generation applications.

• YouTube
• 1 hour 18 minutes
• Self-Paced
• Conference Talk