Black Hat Courses

The Evil of Spy Camera

Explore the structure, principles, and detection methods of spy cameras in this informative talk on combating hidden surveillance devices.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Walking Your Dog in Multiple Forests - Breaking AD Trust Boundaries through Kerberos Vulnerabilities

Explore Kerberos vulnerabilities in Active Directory forest trusts, revealing how attackers can breach trust boundaries in enterprise environments with multiple AD forests.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

The Evil Alt-Ego - Abusing HTTP Alternative Services

Explore HTTP Alternative Services header vulnerabilities and potential exploits, including load balancing manipulation and client segmentation attacks.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

First Contact - Vulnerabilities in Contactless Payments

Explore vulnerabilities in contactless payment systems, examining protocols and potential security risks in this comprehensive analysis of NFC technology.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Faking a Factory - Creating and Operating a Realistic Honeypot

Learn to design and operate a realistic industrial control system honeypot, exploring technical aspects and industrial automation processes for enhanced cybersecurity.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Misuse of DNS - The Second Most Used Protocol

Explore DNS vulnerabilities and attacks, examining the protocol's critical role in internet traffic and its ongoing security challenges as IPv6 adoption grows.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Escaping Virtualized Containers

Explore container security, focusing on shared kernel vulnerabilities that may allow processes to escape and compromise the host system. Learn about potential risks and mitigation strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

WIFI - Important Remote Attack Surface - Threat is Expanding

Explore Wi-Fi driver vulnerabilities and security issues before password authentication, uncovering potential threats and expanding attack surfaces in wireless networks.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

BitLeaker - Subverting BitLocker with One Vulnerability

Explore TPM vulnerabilities and their impact on BitLocker encryption, uncovering potential security risks in widely-used commercial devices.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Engineering Cybersecurity for a Nation - What Singapore is Learning from Cars and Sanitation

Singapore's approach to national cybersecurity, drawing lessons from cars and sanitation to build a Smart Nation and challenge traditional security paradigms.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Conclusions and Key Takeaways from Day 2

Insightful discussion on pressing InfoSec issues by Black Hat Review Board members, highlighting key takeaways and conclusions from the conference's second day.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Adversary Detection Pipelines - Finally Making Your Threat Intel Useful

Learn to maximize your threat intelligence program's value, enhancing security across teams with practical strategies for effective adversary detection and intel utilization.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Discovering Hidden Properties to Attack the Node.js Ecosystem

Novel attack method against Node.js platform using hidden property abusing. Explores vulnerabilities in JavaScript data exchange to tamper with critical program states in server-side applications.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

iOS Kernel PAC, One Year Later

Análisis de la evolución y vulnerabilidades de la autenticación de punteros del kernel de iOS, con demostraciones de nuevos métodos para eludir la seguridad en iOS 13.3.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Detecting Fake 4G Base Stations in Real Time

Learn to detect and understand 4G/LTE IMSI-catchers, explore their capabilities, and discover software solutions for identifying fake base stations. Gain insights into cell network security improvements.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk