Black Hat Courses

Perimeter Breached - Hacking an Access Control System

Explore vulnerabilities in network-connected physical access control systems and their potential impact on organizational security, including breach detection and financial consequences.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

A Dirty Little History - Bypassing Spectre Hardware Defenses to Leak Kernel Data

Explore advanced Spectre attack techniques, focusing on Branch Target Injection and its ability to bypass hardware defenses, with insights on reverse engineering and practical demonstrations.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Blasting Event-Driven Cornucopia - WMI-based User-Space Attacks Blind SIEMs and EDRs

Explore advanced techniques to bypass endpoint security products using Windows Management Instrumentation, revealing vulnerabilities in SIEMs and EDRs for improved threat detection and mitigation.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

No Mr. Cyber Threat! - A Psychological Approach to Managing the Fail-to-Challenge Vulnerability

Explore psychological tactics to address workplace security vulnerabilities, focusing on staff's reluctance to challenge suspicious individuals and behaviors despite obvious red flags.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

All Your GNN Models and Data Belong to Me

Explore vulnerabilities in Graph Neural Networks, including data extraction and model inversion attacks, with insights on protecting proprietary data and models in real-world applications.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

The COW - Container On Windows Who Escaped the Silo

Explore Windows container isolation, its implementation, and potential vulnerabilities. Learn about server silos, job objects, and the security implications of container breakouts.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Oops! I Glitched It Again - How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M

Explore advanced fault injection techniques to bypass glitching protections on ARM TrustZone-M, revealing vulnerabilities in real-world computing devices and discussing potential countermeasures.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

CastGuard - Mitigating Type Confusion in C++

Explore CastGuard, a novel mitigation technique for preventing illegal static down-casts in C++ code, enhancing security in Windows components through efficient virtual function table pointer utilization.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Trust Dies in Darkness - Shedding Light on Samsung's TrustZone Keymaster Design

Exposing critical security flaws in Samsung Galaxy devices' hardware-backed keystore through reverse engineering, revealing vulnerabilities in cryptographic design and implementation.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

XMPP Stanza Smuggling or How I Hacked Zoom

Discover how XML parsing quirks in XMPP can be exploited for attacks, including a demonstration of remote code execution in Zoom, presented by security researcher Ivan Fratric.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Browser-Powered Desync Attacks - A New Frontier in HTTP Request Smuggling

Explore advanced HTTP request smuggling techniques using browsers as attack platforms. Learn to exploit server vulnerabilities, poison connection pools, and launch sophisticated web attacks.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

To Flexibly Tame Kernel Execution With Onsite Analysis

Explore OASIS, a framework for dynamic kernel analysis, enabling flexible control and data collection from kernel threads for various applications like memory introspection and malware testing.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

RCE-as-a-Service - Lessons Learned from 5 Years of Real-World CI-CD Pipeline Compromise

Explore CI/CD pipeline vulnerabilities, their critical role in infrastructure, and novel exploitation techniques. Learn about real-world examples and demos of turning build pipelines into remote code execution vectors.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

The Open Threat Hunting Framework - Enabling Organizations to Build, Operationalize, and Scale Threat

Explore the Open Threat Hunting Framework to build, operationalize, and scale threat hunting in organizations. Learn from industry experts about effective strategies and best practices.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

UWB Real Time Locating Systems - How Secure Radio Communications May Fail in Practice

Explore vulnerabilities in UWB Real Time Locating Systems, potential exploits, and mitigation strategies to secure these systems against cyber attacks.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk