Black Hat Courses

New Exploit Technique in Java Deserialization Attack

Unveiling advanced Java deserialization vulnerabilities: analysis of 10,000+ libraries, new exploit techniques, and their profound impact on Java security. Enhances attack vectors beyond deserialization.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Side Channel Attacks in 4G and 5G Cellular Networks

Explore vulnerabilities in 4G/5G networks, focusing on the ToRPEDO attack that exploits paging occasions to compromise user privacy and security.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Bring Your Own Token to Replace the Traditional Smartcards for Strong Authentication and Signing

Explore Cisco's innovative BYOT solution replacing traditional smartcards, enabling self-provisioned digital identities for enhanced authentication and cryptographic functions using USB tokens.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Detecting -Un-Intentionally Hidden Injected Code by Examining Page Table Entries

Explore techniques for detecting hidden injected code through page table entry analysis, covering both intentional malware concealment and unintentional OS paging mechanisms.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit

Explore coverage-based fuzzing of RDP client virtual channels, targeting complex functionalities like Sound, Graphics, USB, and Filesystem to uncover potential vulnerabilities and crashes.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Booting the iOS Kernel to an Interactive Bash Shell on QEMU

Explore iOS kernel emulation on QEMU, achieving interactive bash shell and live kernel debugging. Discover groundbreaking research towards a full open-source iOS system emulator.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Lessons and Lulz - The 5th Annual Black Hat USA NOC Report

Insights and humor from Black Hat's Network Operations Center, revealing security professionals' behavior on open WiFi and discussing network setup, security, and improvements.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Project Zero - Five Years of Make 0Day Hard

Explore Project Zero's impact on cybersecurity, its core principles, and the need for such initiatives in the tech industry. Gain insights into vulnerability research and mitigation strategies.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Chain of Fools - An Exploration of Certificate Chain Validation Mishaps

Explore implications of poor cryptographic API design, insecure certificate chain validation, and widespread usage of APIs like Android SafetyNet. Recommendations for implementers and API authors are proposed.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Everybody Be Cool, This Is a Robbery!

Explore attack paths on a major bank HSM, including unauthenticated methods for full control, in this technical presentation targeting high-security solutions.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Shifting Knowledge Left - Keeping up with Modern Application Security

Explore modern application security challenges in DevSecOps, including evolving web technologies, persistent vulnerabilities, and emerging framework defenses against common threats.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

A Compendium of Container Escapes

Comprehensive overview of container escape techniques, from basic concepts to advanced exploits, covering orchestrators, Docker sockets, mount points, and kernel structures.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Automation Techniques in C++ Reverse Engineering

Explore dynamic analysis techniques for C++ reverse engineering, focusing on structure usage and function argument types through DLL injection-based automation.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Playing Offense and Defense with Deepfakes

Explore deepfake technology's offensive and defensive applications, including creation process and underlying deep learning models. Gain insights into this powerful and controversial AI tool.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

All Your Apple Are Belong to Us - Unique Identification and Cross-Device Tracking of Apple Devices

Explore unique identification and cross-device tracking of Apple devices, including public APIs and vulnerabilities, to understand potential privacy implications and security risks.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk