Black Hat Courses

Economics, Physics, Psychology & Relation to Technical Aspects of Counter Intelligence

Explore economic, physical, and psychological aspects of counter-intelligence, examining authentication protocols, learned helplessness, and interactive risk in cybersecurity.

• YouTube
• 1 hour 13 minutes
• Self-Paced
• Conference Talk

SQL Injection Detection - Joint Force Database Auditing & Anomaly Intrusion Detection

Explore advanced SQL injection detection techniques, combining database auditing and anomaly intrusion detection for enhanced cybersecurity measures.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

The National ID Debate

Explore the complex issues surrounding national identification systems with expert panelists discussing privacy, security, and societal implications.

• YouTube
• 1 hour 19 minutes
• Self-Paced
• Conference Talk

The Art of File Format Fuzzing

Explore advanced techniques for file format fuzzing, uncovering vulnerabilities in software applications through systematic input manipulation and analysis.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

The Non-Cryptographic Ways of Losing Information

Explore non-cryptographic methods of information loss, examining vulnerabilities and risks in data protection beyond encryption techniques.

• YouTube
• 1 hour 14 minutes
• Self-Paced
• Conference Talk

The Jericho Challenge - Finalist Architecture Presentations and Awards

Finalist presentations and awards for innovative network security architectures, challenging traditional perimeter-based approaches at Black Hat USA 2005.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Beyond EIP

Explore advanced exploitation techniques beyond EIP, including OP sled, return addresses, and encoders. Learn about payloads and stagers for enhanced post-exploitation capabilities.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Injection Flaws - Stop Validating Your Input

Explore injection flaws and learn why input validation alone is insufficient for security. Discover effective strategies to protect against these vulnerabilities in web applications.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Owning the C-suite - Corporate Warfare as a Social Engineering Problem

Explore social engineering tactics in corporate espionage, focusing on vulnerabilities in executive-level security and strategies for protecting high-value targets in organizations.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Flowers for Automated Malware Analysis

Explore advanced malware obfuscation techniques that bind execution to specific host environments, making automated analysis ineffective. Learn about the arms race between malware authors and security practitioners.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Legal Aspects of Computer Network Defense

Explore legal considerations in computer network defense, including legal frameworks, liability issues, and best practices for cybersecurity professionals.

• YouTube
• 1 hour 17 minutes
• Self-Paced
• Conference Talk

CISO Q&A with Jeff Moss

Insightful CISO panel discussion exploring top security challenges, industry trends, and emerging threats in cybersecurity landscape. Covers certifications, zero-day research, and open source risks.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Dex Education - Practicing Safe Dex

Explore Android's dex file format, analyze vulnerabilities in dex analysis tools, and learn techniques to detect post-compilation modifications and protect against potential exploits.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Confessions of a WAF Developer - Protocol-Level Evasion of Web App Firewalls

Explores protocol-level evasion techniques for bypassing web application firewalls, focusing on vulnerabilities in virtual patches and demonstrating real-world examples and countermeasures.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

De Mysteriis Dom Jobsivs - Mac EFI Rootkits

Explore EFI-based rootkits on Intel Macs, covering architecture, kernel injection techniques, persistence methods, and potential defenses against these sophisticated threats.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk