Black Hat Courses

Alcatraz - A Practical Hypervisor Sandbox to Prevent Escapes from the KVM - QEMU and KVM-Based MicroVMs

Explore a hypervisor sandbox solution for preventing escapes from KVM/QEMU and KVM-based MicroVMs, enhancing security in cloud environments and containerized architectures.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

ALPACA - Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication

Explore TLS vulnerabilities, focusing on application layer protocol confusion attacks and mitigation strategies for enhanced network security.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Breaking the Isolation - Cross-Account AWS Vulnerabilities

Uncover critical cross-account vulnerabilities in AWS services, their impact on S3 buckets, and the underlying causes. Learn about potential risks and implications for cloud security.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Anatomy of Native IIS Malware

Explore the evolution and inner workings of IIS malware, from e-commerce attacks to government-targeted backdoors, and learn about their impact on web server security.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Ways to Bypass Your macOS Privacy Mechanisms

Explore techniques to bypass macOS privacy protections, accessing sensitive resources without user consent. Learn about vulnerabilities in Apple's Transparency, Consent, and Control framework.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

HAFL1 - Our Journey of Fuzzing Hyper-V and Discovering a 0-Day

Explore hAFL1, a Hyper-V fuzzer that uncovered a critical 0-day vulnerability. Learn implementation details, see a live exploit demo, and understand its impact on Azure cloud infrastructure.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Everything Has Changed in iOS 14, but Jailbreak Is Eternal

Explore iOS 14's enhanced security measures and the challenges faced by jailbreakers, while examining the persistence of jailbreaking techniques in the evolving iOS ecosystem.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Defeating a Secure Element with Multiple Laser Fault Injections

Explore advanced techniques for bypassing security in Microchip's ATECC608A using double Laser Fault Injection, revealing vulnerabilities in supposedly secure elements.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Exploiting Windows COM - WinRT Services

Discover techniques for exploiting Windows COM/WinRT services, uncovering vulnerabilities in cross-process communication and UWP applications for potential LPE, RCE, and sandbox escape attacks.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Internal Affairs - Hacking File System Access from the Web

Explore vulnerabilities in the File System Access API, revealing how malicious websites can exploit it for arbitrary code execution and bypass security measures.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Exploring and Exploiting Zero-Click Remote Interfaces of Modern Huawei Smartphones

Uncover vulnerabilities in Huawei smartphones' remote interfaces. Learn techniques for exploring baseband security, exposing privacy issues, and exploiting zero-click attack surfaces in modern mobile devices.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Diving Into Spooler - Discovering LPE and RCE Vulnerabilities in Windows Printer

Uncover critical vulnerabilities in Windows Printer Spooler, exploring potential LPE and RCE exploits. Learn from past attacks and discover hidden security risks in this essential system component.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Hack Different - Pwning iOS 14 with Generation Z Bug

Explore innovative iOS 14 exploitation techniques, focusing on alternative attack vectors beyond traditional Safari exploits. Learn about new vulnerabilities and advanced hacking strategies for mobile security.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Let's Attack Let's Encrypt

Explore vulnerabilities in Let's Encrypt's distributed domain validation, revealing downgrade attacks that compromise its security measures against on-path MitM adversaries.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Securing Open Source Software - End-to-End, at Massive Scale, Together

Explore challenges and strategies for securing open source software at scale, drawing insights from major vulnerability remediations and discussing industry-wide coordination efforts.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk