Black Hat Courses

TruEMU - An Extensible, Open-Source, Whole-System iOS Emulator

Explore TruEMU, an open-source iOS emulator enabling complete kernel emulation, including SecureROM and USB stack. Learn about its advantages, implementation, and potential for security research and analysis.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Optical Sound Recovery from Lightweight Reflective Objects

Explore an optical side-channel attack that recovers sound from reflective objects, revealing potential vulnerabilities in home office settings during remote work.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Using Zero to Attack Zero-Knowledge Proof - ZKP PLONK

Explore a critical vulnerability in ZKP PLONK implementation, allowing forged proof creation. Learn how theory guides the attack and its practical execution through software vulnerabilities.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

macOS Vulnerabilities Hiding in Plain Sight

Uncover hidden macOS vulnerabilities by analyzing existing bug reports. Learn to spot overlooked security issues and improve your vulnerability detection skills for Apple's operating system.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

The Next Generation of Windows Exploitation - Attacking the Common Log File System

Explore Windows' Common Log File System vulnerabilities, including analysis, fuzzing techniques, and a new universal exploit method for advanced cybersecurity professionals.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Backdooring of Real Time Automotive OS Devices

Explore vulnerabilities in automotive embedded devices, focusing on bare-metal software and real-time constraints. Learn about potential security risks and backdooring techniques in critical automotive systems.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

AMSI Unchained - Review of Known AMSI Bypass Techniques and Introducing a New One

Explore AMSI bypass techniques, detection methods, and a novel approach targeting AMSI providers' code. Learn about potential vulnerabilities and cutting-edge cybersecurity research.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Greetings from the '90s - Exploiting the Design of Industrial Controllers in Modern Settings

Discover novel exploitation techniques for industrial controllers, focusing on PLC programming practices, APIs, and memory allocation vulnerabilities. Learn about automated enumeration, targeted manipulation, and covert C2 channels.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Veni, No Vidi, No Vici - Attacks on ETW Blind EDR Sensors

Explore vulnerabilities in Event Tracing for Windows (ETW) and how malware can exploit them to disable Endpoint Detection & Response (EDR) solutions, compromising Windows security.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Resting on Feet of Clay - Securely Bootstrapping OPC UA Deployments

Explore security challenges in OPC UA deployments, focusing on secure bootstrapping methods and addressing vulnerabilities in industrial control systems.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Your Trash Kernel Bug, My Precious 0-day

Innovative technique to transform low-risk kernel bugs into critical memory corruption vulnerabilities, enhancing Linux kernel exploitation and unauthorized root privilege escalation.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Skeletons in the App Sandbox - 5+ Ways to Escape

Explore vulnerabilities in Apple's App Sandbox, uncovering methods to bypass security measures and escape containment, with insights on improving iOS and macOS protection.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

The Data Distribution Service - DDS - Protocol is Critical - Let's Use it Securely

Explores vulnerabilities in DDS implementations, crucial for autonomous driving, healthcare, military systems. Discusses security implications and importance of secure usage in critical technologies.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

BadAlloc - Broken Memory Allocators Led to Millions of Vulnerable IoT and Embedded Devices

Explore critical integer-overflow vulnerabilities in memory allocators affecting millions of IoT and embedded devices, their impact, and implications for cybersecurity across various operating systems and SDKs.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

A Hole in the Tube - Uncovering Vulnerabilities in Critical Infrastructure of Healthcare Facilities

Uncovers critical vulnerabilities in pneumatic tube systems used in hospitals, highlighting security risks in healthcare infrastructure and potential impacts on patient care and safety.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk