Black Hat Courses

A Walk Through Historical Correlations Between Vulnerabilities and Stock Prices

Explore the impact of security vulnerabilities and data breaches on stock prices across industries, analyzing recovery patterns and sector-specific effects through historical data analysis.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Analyzing and Fuzzing for Qualcomm Hexagon Processor

Explore techniques for analyzing and fuzzing Qualcomm Hexagon processors, overcoming challenges in firmware analysis, emulation, and hardware-dependent targets for enhanced security research.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

In-Field Emulation and Fuzzing of PLCs to Uncover the Next Zero-Day Threat in Industrial Control Systems

Explore innovative techniques for uncovering vulnerabilities in Industrial Control Systems through in-field emulation and fuzzing of PLCs, focusing on proactive security measures beyond network-level exploits.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Manufacturing Hardware Implants from Idea to Mass Production - A Hacker's Journey

Explore the journey of creating and mass-producing hacking devices, from initial concept to final product. Learn about R&D, quality assurance, and manufacturing challenges in hardware development.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

BinTyper - Type Confusion Detection for C++ Binaries

Explore a novel approach to detect type confusion vulnerabilities in C++ binaries, enhancing software security against malicious code execution attacks.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Jack-in-the-Cache - A New Code Injection Technique through Modifying X86-to-ARM Translation Cache

Explores a novel code injection technique for Windows 10 on ARM, exploiting vulnerabilities in x86-to-ARM translation cache to compromise system security on ARM-based laptops.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

FPs Are Cheap - Show Me the CVEs

Evaluating SAST tools: Learn how to assess their effectiveness in finding real vulnerabilities using synthetic test suites and practical examples of CVEs.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Shield with Hole - New Security Mitigation Helps Us Escape Chrome Sandbox to Exfiltrate User Privacy

Explore how new security measures in Chrome can be exploited to bypass the sandbox and compromise user privacy, revealing potential vulnerabilities in browser protection mechanisms.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Graph Convolutional Network-Based Suspicious Communication Pair Estimation for Industrial Control Systems

Explore graph convolutional networks for detecting suspicious communication pairs in industrial control systems, enhancing security monitoring beyond traditional whitelisting methods.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

The Subtle Art of Chaining Headers - IKEv2 Attack Surface Case Study

Explore IKEv2 attack surface through header chaining, uncovering vulnerabilities in IPsec VPNs. Learn techniques for identifying and exploiting weaknesses in Internet Key Exchange implementations.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Fingerprint-Jacking - Practical Fingerprint Authorization Hijacking in Android Apps

Practical exploration of fingerprint authorization vulnerabilities in Android apps, demonstrating attack techniques and suggesting mitigation strategies for developers.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Light Commands - Hacking Voice Assistants with Lasers

Explore how lasers can manipulate voice-activated IoT devices, revealing potential security vulnerabilities in smart home technology and microphone systems.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Design Pitfalls in Commercial Mini-Programs on Android and iOS

Explore security vulnerabilities in app-in-app paradigms for Android and iOS, focusing on mini-programs' design flaws and potential risks to user privacy and data protection.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

A New Hope - The One Last Chance to Save Your SSD Data

Explore SSD data recovery techniques, uncovering hidden management methods and confidential controller information to maximize chances of retrieving lost data from solid-state drives.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk