Black Hat Courses

Introduction to Corporate Information Security Law

1 rating

Explore corporate information security law fundamentals, legal frameworks, and compliance strategies for protecting sensitive data and mitigating cyber risks in business environments.

• YouTube
• 1 hour 26 minutes
• Self-Paced
• Conference Talk

From Dead Data to Digestion - Extracting Windows Fibers for Your Digital Forensics Diet

1 rating

Explore Windows Fibers' undocumented internals, reverse APIs, and create detection telemetry from process memory. Learn about a new open-source tool for threat hunting and EDR development.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Lemons and Liability - Cyber Warranties as an Experiment in Software Regulation

1 rating

Explore cyber warranties as a voluntary liability model for software security, examining their implications for policy-makers and the cybersecurity industry.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Supply Chain Infections and the Future of Contactless Deliveries

1 rating

Explore supply chain risks, their consequences, and industry mitigation strategies in light of recent challenges. Gain insights into software integrity and future security measures.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Securing Your Big Data Environment

1 rating

Explore strategies for securing big data environments, focusing on Hadoop. Learn about control frameworks, data protection techniques, and effective risk management for sensitive information.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Dynamic Binary Instrumentation Techniques to Address Native Code Obfuscation

1 rating

Explore dynamic binary instrumentation techniques for tackling obfuscated Android app code, aiding reverse engineers in overcoming anti-analysis protections.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Project Zero: Ten Years of Making Zero-Day Exploits Hard

Explore Project Zero's decade-long mission to combat 0-day vulnerabilities, examining its impact on security research, bug discovery, and the evolving landscape of cyber threats.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Practical LLM Security - Takeaways From a Year in the Trenches

Explore practical LLM security findings from NVIDIA's AI Red Team, covering common attacks, assessment strategies, and secure integration design principles for AI applications.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Living off Microsoft Copilot - Exploiting AI for Red Team Operations

Explore how Microsoft Copilot can be exploited for covert data theft, exfiltration, and AI-based social engineering. Learn about LOLCopilot tool and recommended protective measures against Copilot abuse.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Creating Evil Twin Instances of a Class - ClassLoader Exploitation in Android

Explore how third-party Android apps can exploit ClassLoader mechanisms to create malicious Java objects, potentially compromising security without requiring permissions, with practical examples and mitigation strategies.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Heartbeat Havoc: Unveiling Remote Vulnerabilities in Windows Network Load Balancing

Dive into the security analysis of Windows Network Load Balancing, exploring vulnerabilities in the Heartbeat feature including integer overflows, race conditions, and memory issues that can lead to remote code execution or DoS attacks.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Exposing the Dark Corners of SAP - 4 Years of Threat Intelligence Data Analyzed

Dive into an analysis of 4 years of threat intelligence data revealing how threat actors target SAP applications, vulnerability trends, and why ERP security deserves more attention from security professionals.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Apple Disk-O Party - Vulnerabilities in macOS Disk Management Systems

Dive into four disk-related vulnerabilities in Apple systems, exploring diskarbitrationd, diskutil, storagekitd, and Disk Utility to understand sandbox escapes, TCC bypasses, and privilege escalation techniques.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Java Authentication and Authorization Service (JAAS) - A Novel Attack Surface

Explore a novel attack surface in Java security: JAAS (Java Authentication and Authorization Service). Learn how improper implementation can lead to RCE vulnerabilities affecting major vendors and how to securely integrate JAAS into Java libraries.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

The Insecure IoT Cloud Strikes Again: RCE on All Ruijie Cloud-Connected Devices

Discover how researchers exploited Ruijie access points by sniffing WIFI beacons, extracting firmware, and finding vulnerabilities that allowed remote code execution and network infiltration through cloud service impersonation.

• YouTube
• 38 minutes
• Self-Paced
• Free Video