Black Hat Courses

Black-Box Laser Fault Injection on a Secure Memory

Explore vulnerability research on the Microchip ATECC508A secure memory, examining laser fault injection techniques to bypass cryptographic authentication in IoT devices.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Escaping Virtualized Containers

Explore container escape techniques and new sandboxing tools using unikernels, lightweight VMs, and userspace-kernels to enhance isolation between host and container OS.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Portable Document Flaws 101

Dive deep into PDF's insecure features and vulnerabilities, exploring malicious capabilities affecting major viewers through systematic analysis and in-depth examination.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

Explore a Safari exploit chaining six vulnerabilities to compromise the macOS kernel. Learn about offensive security research and browser-based kernel exploitation techniques.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Breaking Samsung's Root of Trust - Exploiting Samsung S10 Secure Boot

Exploración de vulnerabilidades en el arranque seguro de Samsung S10, analizando el manejo de solicitudes USB en S-Boot y sus implicaciones para la seguridad del dispositivo.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Lamphone - Real-Time Passive Reconstruction of Speech Using Light Emitted from Lamps

Explore a novel eavesdropping technique using light bulb vibrations to reconstruct speech in real-time, overcoming limitations of previous side-channel attacks for audio surveillance.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Hacking Public Opinion

Explore tactics of modern information operations, their impact on public opinion, and how to defend against them in the context of upcoming elections.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Stress Testing Democracy - Election Integrity During a Global Pandemic

Explore challenges in maintaining election integrity amid a pandemic, focusing on secure voting technology and protecting voter health. Learn about scaling up safer, accessible voting mechanisms.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

Black Hat Fast Chat

Insights into Black Hat Briefings review process, Malware Track leadership, and community development initiatives from cybersecurity expert Matt Suiche, founder of Comae Technologies.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

A Surprise Trip to Zero-Trust Land

Explore zero-trust security's benefits in addressing current and future challenges beyond attacks, with insights from industry experts on implementation and design patterns.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Simple Spyware - Androids Invisible Foreground Services and How to Abuse Them

Explore Android's permission vulnerabilities, invisible foreground services, and spyware risks. Learn detection methods and protective measures for enhanced mobile security.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Inside Out - The Cloud Has Never Been So Close

Explore a novel graph-based approach to cloud infrastructure attacks, revealing vulnerabilities in resource relationships and demonstrating potential privilege escalation techniques.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Breaking Bootloaders on the Cheap

Reverse-engineering bootloaders of popular microcontrollers to assess vulnerabilities in readout protection, focusing on software-based attacks and critical flaws in specific chip families.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

BlueMaster - Bypassing and Fixing Bluetooth-Based Proximity Authentication

Explore security vulnerabilities in Bluetooth proximity authentication, including new attacks on Android Smart Lock and Windows Dynamic Lock, and learn potential fixes for these issues.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

OEM Finder - Hunting Vulnerable OEM IoT Devices at Scale

Discover a tool for identifying vulnerable OEM IoT devices across thousands of images, revealing security risks in both supplier and vendor firmware distributions.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk