Black Hat Courses

Do Not Trust the ASA, Trojans

Explore vulnerabilities in Cisco ASA firewalls, including ASDM package verification issues and FirePOWER module exploits. Learn to create malicious packages and gain root access.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Go With the Flow - Enforcing Program Behavior Through Syscall Sequences and Origins

Explore syscall-flow-integrity protection (SFIP) to enhance application security by limiting control flow across user-to-kernel transfers, addressing vulnerabilities in complex software systems.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

How Firefox Uses In-process Sandboxing to Protect Itself From Exploitable Libraries

Explore Firefox's innovative approach to mitigating zero-day attacks using in-memory sandboxes for third-party C libraries, enhancing security against memory safety vulnerabilities.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Devils Are in the File Descriptors - It Is Time To Catch Them All

Explore vulnerabilities in Linux kernel file descriptor operations, focusing on high-risk scenarios in exporting and importing, and learn to identify and address these security concerns.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

ELF Section Docking - Revisiting Stageless Payload Delivery

Explore advanced techniques for embedding and loading static payloads in Linux malware, focusing on ELF binary construction and section manipulation to enhance payload survival and evasion.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

How Supercomputer-Scale Neural Network Models Apply to Defensive Cybersecurity Problems

Explore how large-scale neural networks revolutionize cybersecurity, enabling custom explanations of attacker behavior and improved threat detection with limited data. Learn to leverage public models like GPT-3 for security applications.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Demystifying Key Stretching and PAKEs

Explore key stretching and PAKEs: their history, best practices, and applications in encrypted cloud services. Learn to create toy algorithms and understand their importance in cybersecurity.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

DNSSEC Downgrade Attacks

Explore DNSSEC vulnerabilities and cryptographic agility risks, revealing how adversaries can manipulate DNS responses to compromise security and prevent DNSSEC validation.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

The Battle Against the Billion-Scale Internet Underground Industry - Advertising Fraud Detection

Explore the escalating war between internet advertising fraud and anti-fraud efforts. Analyze typical underground industry gangs and their evolving tactics in this high-stakes technological confrontation.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Trying to Be Everything to Everyone - Let’s Talk About Burnout

Explore burnout in computer security, its causes, and mitigation strategies. Learn to set boundaries, manage anxiety, and maintain passion in a high-stress industry facing significant workforce shortages.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

From Hackathon to Hacked - Web3's Security Journey

Explore Web3 and blockchain security challenges, examining the risks of emerging tech, high-stakes environments, and immutable transactions. Learn about current vulnerabilities and potential solutions.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Charged by an Elephant - An APT Fabricating Evidence to Throw You in Jail

Explore ModifiedElephant's decade-long operation, incriminating activists through planted evidence. Uncover the concerning ties to commercial surveillance and multiple regional threat actors targeting victims.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Fault-Injection Detection Circuits - Design, Calibration, Validation and Tuning

Explores Intel's tunable replica circuit for detecting fault-injection attacks in processors, focusing on design, implementation, and effectiveness in preventing timing failures and unauthorized code execution.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

The Cyber Safety Review Board - Studying Incidents to Drive Systemic Change

Explore the Cyber Safety Review Board's analysis of the Log4j vulnerability, key findings, and recommendations for industry and government to enhance cybersecurity and drive systemic change.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

EBPF ELFs JMPing Through the Windows

Explore eBPF for Windows: capabilities, security model, design, and attack surface. Uncover vulnerabilities, witness fuzzing demos, and discuss exploitation challenges in Windows Protected Process.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk