Black Hat Courses

Remote Memory-Deduplication Attacks

Explore remote memory-deduplication attacks in cloud systems, their implications for security, and potential countermeasures. Learn about ASLR breaks, Rowhammer attacks, and application fingerprinting.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Hunting and Exploiting Recursive MMIO Flaws in QEMU KVM

Explore security vulnerabilities in QEMU/KVM hypervisors caused by recursive MMIO handling, uncovering a new attack surface with potential for critical exploits in cloud computing environments.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Start Arbitrary Activity App Components as the System User Vulnerability Affecting Samsung Android

Vulnerability in Samsung Android allows zero-permission apps to execute arbitrary activities as system user, compromising device security across multiple Android versions.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Do You Speak My Language? Make Static Analysis Engines Understand Each Other

Explore a novel framework for cross-language taint-flow analysis, enabling detection of critical security vulnerabilities across multiple codebases and programming languages.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Measure Security Effectively

Learn strategies to quantify cybersecurity effectiveness, determine ROI, and communicate results from the security trenches to the boardroom, addressing a key industry challenge.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Conclusions and Key Takeaways from Black Hat Asia 2022

Insightful discussion on pressing InfoSec issues, trends, and future strategies by Black Hat Asia Review Board members, covering topics like stress testing, sanctions, governance, and emerging technologies.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Hacking Democracy - Will Our Societies Hold?

Explore the impact of digital technologies on democratic societies and the challenges they pose to governance, social cohesion, and political stability in this thought-provoking keynote.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

SideWinder Uncoils to Strike

Explore the aggressive SideWinder threat actor's tactics, infection chain, and infrastructure. Learn about their evolving techniques and effective mitigation strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The Next Gen PlugX - ShadowPad - A Dive into the Emerging China-Nexus Modular Trojan, Pangolin8RAT

Explore the emerging Pangolin8RAT trojan, its potential as a successor to PlugX and ShadowPad in Chinese cyber operations, and its attack timeline from 2020 to 2021.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

From Coordinated Disclosure to Cooperative Vulnerability Research When Dealing with Critical Software Stacks

Explore evolving approaches to vulnerability disclosure in critical software, emphasizing early cooperation between researchers and vendors for improved security outcomes.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

ECMO - Rehost Embedded Linux Kernels via Peripheral Transplantation

Innovative technique for rehosting embedded Linux kernels in QEMU using peripheral transplantation, enabling dynamic analysis of firmware images from diverse embedded devices.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

A Universal Way to Exploit Android PendingIntents in High-profile and System Apps

Explore Android PendingIntent vulnerabilities in high-profile apps, learn exploitation techniques, and discover security implications for developers and system integrity.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

The Black Hat Europe NOC Report

Explore the evolution of Black Hat's Network Operations Center, adapting to virtual events while maintaining security. Learn about infrastructure, tools, and challenges in managing a notorious network.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Building Better CSIRTs Using Behavioral Psychology

Explore behavioral psychology insights to improve CSIRT effectiveness, addressing team dynamics, communication, and collaboration challenges for enhanced incident response.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Message in a Broken Bottle - Exploring the Linux IPC Attack Surface

Explore Linux's IPC attack surface, focusing on systemd and dbus-daemon. Discover vulnerabilities in system services and learn about potential security risks in Linux's userspace processes.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk