Black Hat Courses

Backdoor Investigation and Incident Response - From Zero to Profit

Uncover how attackers breached an online gaming company, exploited a database backdoor, and manipulated transactions. Learn detection methods and incident response strategies for similar cyber attacks.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Codema Attack - Controlling Your Smart Home Through Dangling Management Channels

Análisis de vulnerabilidades en dispositivos IoT populares y desarrollo de CGuard, un nuevo marco de control de acceso para proteger a los usuarios finales de amenazas en canales de gestión.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

SMS PVA Services Fueled by Compromised Supply-Chain Mobile Botnets

Uncover the operations of SMS PVA services and mobile botnets, exploring device infection methods, threat actor misuse, and the implications for supply chain security in mobile ecosystems.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Cooper Knows the Shortest Stave - Finding 134 Bugs in the Binding Code of Scripting Languages

Innovative approach to finding bugs in scripting languages through cooperative mutation, combining script code and native input modifications to uncover hidden vulnerabilities in binding code.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

DroidGuard - A Deep Dive into SafetyNet

Explore SafetyNet's internal mechanisms, VM design, and security checks for detecting Magisk, emulators, rooted devices, and Pegasus in this comprehensive analysis of DroidGuard.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Explosion - The Hidden Mines in the Android ION Driver

Uncover vulnerabilities in Android's ION driver, explore root causes, and learn how to achieve privilege escalation. Gain insights into preventing similar security issues in the Android ecosystem.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Non-Intrusive Vulnerability Localization and Hotpatching for Industrial Control Systems

Explore non-intrusive techniques for identifying and patching vulnerabilities in Industrial Control Systems, focusing on specialized requirements of devices like PLCs.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

The Little Seal Bug - Optical Sound Recovery from Lightweight Reflective Objects

Explore an optical side-channel attack that recovers sound from reflective objects in home offices, revealing potential vulnerabilities in remote work environments.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

USMA - Share Kernel Code With Me

Explore Linux kernel attack methods, focusing on gadgets and CFI mitigation. Learn about innovative techniques to overcome limitations and enhance kernel exploitation strategies.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Like Lightning From the Cloud - Finding RCEs in an Embedded TLS Library

Explore techniques for discovering remote code execution vulnerabilities in embedded TLS libraries, with insights on improving security in IoT and embedded systems.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Unix Domain Socket - A Hidden Door Leading to Privilege Escalation in the Android Ecosystem

Explore Unix domain socket vulnerabilities in Android, revealing potential privilege escalation risks and security implications for third-party applications and vendor implementations.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Dynamic Process Isolation

Explore cloud computing security with in-process isolation techniques, addressing vulnerabilities in shared hardware resources while maintaining high performance.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

The Firmware Supply-Chain Security Is Broken - Can We Fix It?

Explores firmware supply chain vulnerabilities, outsourcing risks, and security gaps in hardware products. Discusses challenges in fixing known issues and proposes solutions for improved threat modeling and security.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

The Hidden RCE Surfaces That Control the Droids

Uncover hidden vulnerabilities in Android OS libraries that process incoming files, potentially leading to remote code execution attacks on various system applications.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

To Loot or Not to Loot - That Is Not a Question When State Nexus APT Targets Online Entertainment

Dissecting APT attacks on online entertainment companies, revealing espionage motives beyond financial gain. Analyzes 20+ operations since 2018, exposing tactics and implications for data-rich targets.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk