Black Hat Courses

Scavenger - Misuse Error Handling Leading to Qemu - KVM Escape

Explore how mishandled error codes in hypervisors can lead to security vulnerabilities, including guest-to-host escape exploits in Qemu/KVM environments.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Mining and Exploiting Mobile Payment Credential Leaks in the Wild

Explores prevalence and security impacts of payment credential leaks from mobile apps, revealing vulnerabilities in third-party payment systems serving billions of users globally.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

The Rise of Potatoes - Privilege Escalations in Windows Services

Explore recent privilege escalation techniques in Windows services, focusing on methods attackers use to gain full system control from lower-privileged access.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

A General Approach to Bypassing Many Kernel Protections and Its Mitigation

Explore a novel exploit technique using elastic objects to bypass kernel protections like KASLR. Learn about this general approach, its implications, and potential mitigation strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Hacking the Cybersecurity Puzzle

Visionary approach to cybersecurity: collaboration between hackers, government, and private sector to tackle threats. Insights on infrastructure protection, information sharing, and workforce development.

• YouTube
• 1 hour 8 minutes
• Self-Paced
• Conference Talk

The Kitten that Charmed Me - The 9 Lives of a Nation State Attacker

Uncover how operational security errors of a state-sponsored threat group revealed details of their entire operation, targeting high-profile individuals and compromising sensitive information.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Can You Hear Me Now? Remote Eavesdropping Vulnerabilities in Mobile Messaging Applications

Explore remote eavesdropping vulnerabilities in mobile messaging apps, focusing on the Group FaceTime bug and its implications for user privacy and application security.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Insights and Predictions - What's Next in InfoSec

Explore pressing InfoSec issues and future trends with Black Hat Review Board members in this insightful panel discussion, offering key takeaways for shaping future security strategies.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

The Ripple Effect - Building a Diverse Security Research Team

Strategies for building a diverse and inclusive security research team, highlighting successful approaches to gender equality and representation in the hacking industry.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Portable Data exFiltration - XSS for PDFs

Explore PDF vulnerabilities and learn how a single HTTP link can compromise PDF contents, exposing security risks in widely-used document formats and generators.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Debug Resurrection on Nordic nRF52 Series

Uncover vulnerabilities in Nordic nRF52 SoCs through debug resurrection techniques. Learn about IoT security implications and potential exploits in these widely-used platforms.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

This is for the Pwners - Exploiting a WebKit 0-day in PlayStation 4

Explore WebKit exploitation techniques for PlayStation 4, focusing on browser vulnerabilities as entry points for full-chain attacks. Learn about hardening challenges and cutting-edge exploit development.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

How to Better Fuzz Windows 10 DirectX Kernel at Present

Explore advanced techniques for fuzzing Windows 10 DirectX kernel, uncovering new attack methods and vulnerabilities in the rendering engine that powers the Windows platform.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Permission Mining in GCP

Explore effective permissions and identity assumption in Google Cloud Platform to enhance security and prevent privilege escalation risks.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Finding Bugs Compiler Knows but Doesn't Tell You - Dissecting Undefined Behavior Optimizations in LLVM

Explore LLVM compiler optimizations for undefined behavior, uncovering hidden bugs and security vulnerabilities in C/C++ programs through advanced static analysis techniques.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk