Black Hat Courses

A Decade After Stuxnet's Printer Vulnerability - Printing is Still the Stairway to Heaven

Explore the enduring security risks in Windows Print Spooler service, a decade after Stuxnet's infamous exploit, and learn about current vulnerabilities in printing systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

When TLS Hacks You

Explore how TLS features can be exploited for attacks, focusing on Server-Side Request Forgery. Learn about a novel, cross-platform method to leverage TLS for targeting internal services.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Heroku Abuse Operations - Hunting Wolves in Sheep's Clothing

Explore techniques for detecting and responding to malicious activity disguised as legitimate use in cloud platforms. Learn to identify and mitigate abuse scenarios that bypass traditional security measures.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

FASTCash and INJX_Pure - How Threat Actors Use Public Standards for Financial Fraud

Explore how cybercriminals exploit public standards to conduct ATM fraud through INJX_Pure and Lazarus FASTCash malware, showcasing their programming skills and understanding of financial transactions.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Decade of the RATs – Custom Chinese Linux Rootkits for Everyone

Uncovers a decade-long, state-sponsored cyber espionage campaign targeting Linux servers, revealing custom malware and rootkits used in strategic attacks on government and industry infrastructure.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Whispers Among the Stars - A Practical Look at Perpetrating Satellite Eavesdropping Attacks

Experimental exploration of satellite broadband vulnerabilities using affordable equipment. Demonstrates eavesdropping techniques across land, air, and sea communications with minimal detection risk.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

EtherOops - Exploring Practical Methods to Exploit Ethernet Packet-in-Packet Attacks

Explore practical methods to exploit Ethernet packet-in-packet attacks, bypassing firewalls and NAT solutions. Learn how attackers can establish man-in-the-middle positions to eavesdrop on corporate communications.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Beyond Root - Custom Firmware for Embedded Mobile Chipsets

Explore reverse engineering techniques to bypass protections and expand functionality of embedded mobile chipsets, going beyond traditional rooting methods for complete device control.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Remote Timing Attacks on TPMs - AKA TPM-Fail

Uncovers vulnerabilities in Trusted Platform Modules through timing analysis, revealing potential security risks in hardware-based cryptographic systems used across various computing platforms.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Operation Chimera - APT Operation Targets Semiconductor Vendors

Analysis of APT attacks on semiconductor industry, focusing on Taiwan. Explores threat actors, campaigns, and security status, highlighting potential global supply chain impacts.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Routopsy - Modern Routing Protocol Vulnerability Analysis and Exploitation

Explore vulnerabilities in dynamic routing and redundancy protocols, learn about common misconfigurations, and discover techniques for network attacks and discovery in this comprehensive analysis.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Industrial Protocol Gateways Under Analysis

Explore security vulnerabilities in industrial protocol gateways, examining cross-vendor issues and potential impacts on industrial facilities in the context of Industry 4.0 interconnectivity.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

About Directed Fuzzing and Use-After-Free - How to Find Complex & Silent Bugs

Explore directed fuzzing techniques for targeted vulnerability detection, focusing on bug reproduction and patch-oriented testing to uncover complex and silent software flaws.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Virtually Private Networks

Explore the security implications of remote access solutions and VPNs for enterprise mobile workforces, examining potential vulnerabilities and challenges.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

All You Ever Wanted to Know about the AMD Platform Security Processor and Were Afraid to Emulate - Inside a Deeply Embedded Security Processor

Explore AMD's Platform Security Processor: its role in system bootstrapping, security features, and proprietary nature. Gain insights into this embedded ARM core within x86 CPUs.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk