Black Hat Courses

Pwning Cloud Vendors with Untraditional PostgreSQL Vulnerabilities

Explore PostgreSQL vulnerabilities in cloud services, including isolation issues and potential cross-account access attacks. Learn about real-world impacts and recent demonstrations of database security flaws.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Pre-Stuxnet, Post-Stuxnet - Everything Has Changed, Nothing Has Changed

Explore the impact of Stuxnet on cybersecurity, revealing vulnerabilities in critical infrastructure and the shift in focus from IT networks to operational systems and national security concerns.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Process Injection - Breaking All macOS Security Layers With a Single Vulnerability

Explore macOS security vulnerabilities through process injection, revealing how a single flaw can compromise multiple security layers and impact user data protection.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

BrokenMesh - New Attack Surfaces of Bluetooth Mesh

Explores vulnerabilities in Bluetooth Mesh networks, analyzing protocols, demonstrating attack surfaces, and introducing a BLE Mesh Fuzzer. Includes real-world cases and security recommendations.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Real 'Cyber War' - Espionage, DDoS, Leaks, and Wipers in the Russian Invasion of Ukraine

Explore cyber operations in the Russia-Ukraine conflict, examining espionage, DDoS attacks, leaks, and wipers to understand the realities of modern cyber warfare beyond sensationalized narratives.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Smishmash - Text Based 2FA Spoofing Using OSINT, Phishing Techniques and a Burner Phone

Explore techniques for circumventing text-based 2FA using OSINT, phishing, and burner phones. Learn to connect leaked credentials with likely 2FA phone numbers from public sources.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Breaking the Chrome Sandbox with Mojo

Explore Chrome's sandbox security, focusing on Mojo IPC services as potential targets for sandbox escapes. Learn about vulnerabilities and exploitation techniques in browser security.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Catch Me If You Can - Deterministic Discovery of Race Conditions with Fuzzing

Novel fuzzing approach for deterministic discovery of race condition bugs, enabling researchers to unearth and root cause serious concurrency issues while maintaining an enjoyable process.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Calculating Risk in the Era of Obscurity - Reading Between the Lines of Security Advisories

Explore systemic issues in security patches, their impact on enterprise security, and strategies to improve vendor servicing habits. Learn to interpret advisories and prioritize risk management.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RollBack - A New Time-Agnostic Replay Attack Against the Automotive Remote Keyless Entry Systems

Unveils a novel time-agnostic replay attack on automotive remote keyless entry systems, exploiting vulnerabilities in rolling code implementations to gain unauthorized vehicle access.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Glitched on Earth by Humans - A Black-Box Security Evaluation of the SpaceX Starlink User Terminal

Explore the security vulnerabilities of SpaceX Starlink's User Terminal through black-box hardware evaluation, revealing how voltage fault injection can bypass firmware signature verification.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Custom Processing Unit - Tracing and Patching Intel Atom Microcode

Unveils groundbreaking framework for observing, tracing, and patching Intel Atom microcode execution, offering unprecedented insights into CPU internals and microcode update processes.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

ElectroVolt - Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron

Uncover novel attack vectors in Electron framework, leading to remote code execution in popular desktop apps despite security measures. Explore vulnerabilities in Discord, Teams, VSCode, and more.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Elevating Kerberos to the Next Level

Explore Kerberos authentication protocol's inner workings, focusing on local machine security implications and privilege escalation vulnerabilities in Windows enterprise networks.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Google Reimagined a Phone - It Was Our Job to Red Team and Secure It

Explore Android's security measures for Pixel 6, including fuzz testing, emulators, and code reviews. Learn about vulnerabilities in critical components and see demos of security-critical issues.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk