Black Hat Courses

TeamTNT - Explosive Cryptomining

Explore TeamTNT's cryptojacking tactics targeting Linux servers, including their attack methods, credential theft, and evolution from Docker instances to Windows systems.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Recertifying Active Directory Certificate Services

Explore AD CS vulnerabilities, attack vectors, and defense strategies for securing Microsoft's PKI implementation. Learn escalation scenarios, auditing techniques, and incident response.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Zen and the Art of Adversarial Machine Learning

Explore security concerns in machine learning integration, including data extraction, model evasion, and biased outcomes. Learn operational guidance and tools for addressing these challenges.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

HTTP/2 - The Sequel is Always Worse

Uncover HTTP/2 vulnerabilities and their impact on web security. Learn about implementation flaws, RFC imperfections, and new attack techniques targeting high-profile websites and various server infrastructures.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Windows Defender - Demystifying and Bypassing ASR by Understanding the AV's Signatures

Explore Windows Defender's undocumented signature format, learn ASR rule implementation, and discover techniques for signature evasion in this comprehensive security analysis.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

BadMesher - New Attack Surfaces of Wi-Fi Mesh Network

Explore new attack surfaces in Wi-Fi Mesh networks, focusing on EasyMesh vulnerabilities. Learn about network build and control attacks, and discover MeshFuzzer for identifying security flaws.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Finding Vulnerabilities in TensorFlow

Explore vulnerabilities in TensorFlow through advanced fuzzing techniques, focusing on deep issues hidden in complex code logic and semantic contexts beyond traditional API fuzzing methods.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Security Industry Call-to-Action - We Need a Cloud Vulnerability Database

Explore cloud vulnerabilities in AWS, GCP, and Azure, and learn why a cloud-specific vulnerability database is crucial for improved security in the evolving cloud landscape.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

The Bad Guys Win - Analysis of Magecart Vulnerabilities

Comprehensive analysis of Magecart vulnerabilities, exploring attack methods, defense mechanisms, and enterprise challenges in securing third-party scripts and preventing digital supply-chain attacks.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Burning Bridges - Stopping Lateral Movement via the RPC Firewall

Explore Windows RPC security, lateral movement prevention, and the RPC Firewall tool to enhance network defense against remote attacks and ransomware spread.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Inside the Ransomware Negotiation Economics

Explore the economics and negotiation strategies of ransomware attacks, focusing on digital extortion tactics, decision-making processes, and effective countermeasures for organizations.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

From Logic to Memory - Winning the Solitaire in Reparse Points

Explore advanced Windows file redirection vulnerabilities, bypassing mitigations with novel exploit techniques. Learn about reparse points, logic flaws, and memory corruption in system services.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

A Universal Way to Exploit Android PendingIntents in High-profile and System Apps

Explore Android PendingIntent vulnerabilities in high-profile apps, learn exploitation techniques, and discover security implications through case studies and practical demonstrations.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

New Ways of IPv6 Scanning

Explore innovative techniques for IPv6 scanning, uncovering vulnerabilities and effective methods to obtain IPv6 addresses despite the vast address space.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

A Titan M Odyssey

Explore Google's Titan M chip: its architecture, security features, and potential vulnerabilities through reverse engineering and dynamic analysis techniques.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk