Black Hat Courses

Government-Mandated Front Doors - A Global Assessment of Legalized Government Access to Data

Explore global trends in government-mandated data access, examining policies, tactics, and implications for privacy and intellectual property across various countries and regions.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

MFA-ing the Un-MFA-ble - Protecting Auth Systems' Core Secrets

Explore advanced techniques for securing authentication systems against credential compromise, focusing on protecting core secrets and implementing multi-factor authentication for critical components.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Legal Pitfalls to Avoid in Security Incidents

Explore real-world examples of lawyer-security professional collaboration during security incidents, focusing on legal pitfalls and effective communication strategies.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

CnCHunter - An MITM-Approach to Identify Live CnC Servers

Systematic tool for efficiently discovering live CnC servers using MITM approach, overcoming challenges of changing locations, proprietary protocols, and encryption in botnet communication.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Disinformation at Scale - Using GPT-3 Maliciously for Information Operations

Explores the potential misuse of GPT-3 for large-scale disinformation campaigns, examining its capabilities to generate convincing fake news and the implications for society and information integrity.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Crashing Your Way to Medium-IL - Exploiting the PDB Parser for Privilege Escalation

Discover vulnerabilities in Windows PDB parser, learn exploitation techniques for privilege escalation, and explore the intricacies of memory corruption in DbgHelp.dll.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

DBREACH - Database Reconnaissance and Exfiltration via Adaptive Compression Heuristics

Explore database vulnerabilities through compression side-channel attacks, learning techniques to extract encrypted content and strategies for prevention and patching.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Greybox Program Synthesis - A New Approach to Attack Dataflow Obfuscation

Explore cutting-edge program synthesis techniques for deobfuscation, focusing on intellectual property protection in mobile and embedded systems. Learn about latest advances and practical applications.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Next-Gen DFIR - Mass Exploits & Supplier Compromise

Explore real-world cases of large-scale cyber incidents, focusing on service and software provider compromises. Learn to adapt DFIR processes for global threats and improve incident visibility.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Breaking Network Segregation Using Esoteric Command & Control Channels

Explore novel techniques for lateral movement in segregated networks using unconventional command and control channels, enhancing penetration testing and attack simulation capabilities.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Demystify AI Security Products With a Universal Pluggable XAI Translator

Explore a universal XAI translator to evaluate AI-powered security products, bridging research and practice for informed decision-making in the rapidly evolving field of AI security.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

HPE iLO5 Firmware Security - Go Home Cryptoprocessor, You're Drunk!

Explore vulnerabilities in HPE Gen10 servers' iLO5 management technology, focusing on the "silicon root of trust" and its implications for server security.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

With Friends Like eBPF, Who Needs Enemies?

Explore eBPF's evolution from network monitoring to a powerful Linux kernel observability tool, its security implications, and potential misuse by attackers.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

PCIe Device Attacks - Beyond DMA - Exploiting PCIe Switches, Messages and Errors

Explore advanced PCIe security threats targeting switches and Translation Layer Packets. Learn about novel attack vectors beyond traditional DMA exploits in high-bandwidth peripheral connections.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Over the Air Baseband Exploit - Gaining Remote Code Execution on 5G Smartphones

Explore 5G network security, baseband vulnerabilities, and remote code execution on smartphones through hands-on research, methodology, and live demonstrations.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk