Black Hat Courses

Cloudy with a Chance of APT - Novel Microsoft 365 Attacks in the Wild

Explore novel APT techniques targeting Microsoft 365, including persistent access methods and data extraction. Learn technical details, potential extensions, and prepare for emerging threats.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

A Broken Chain - Discovering OPC UA Attack Surface and Exploiting the Supply Chain

Explore OPC-UA protocol vulnerabilities and potential cyberattack vectors in industrial communication systems. Learn about attack surfaces, exploitation techniques, and security implications for Industry 4.0 environments.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Can You Roll Your Own SIEM

Explore building a custom cloud-native SIEM solution, discussing considerations, requirements, and benefits compared to vendor options. Learn about cost savings and improved capabilities.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

5G IMSI Catchers Mirage

Investigates 5G security mechanisms against IMSI catchers, exploring vulnerabilities and protection techniques through practical experiments with commercial devices.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Electromagnetic Fault Injection & Automotive Systems

Explore electromagnetic fault injection to bypass security in automotive ECUs, demonstrating potential vulnerabilities in modern vehicle systems through practical examples and live demonstrations.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Embedding a Human-Centric Approach Into a Global Cyber Security Program

Explore a human-centric approach to cybersecurity, challenging traditional views and examining how Airbus integrates this perspective into their global program for enhanced protection.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Come to the Dark Side, We Have Apples - Turning macOS Management Evil

Explore advanced offensive techniques for exploiting macOS management platforms, including MDM and Jamf, to gain unauthorized access and control over enterprise systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Hacking a Capsule Hotel - Ghost in the Bedrooms

Explore IoT vulnerabilities in capsule hotels, revealing how six exploits can be combined to control bedrooms and potentially disrupt noisy neighbors.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Deepfake Social Engineering - Creating a Framework for Synthetic Media Social Engineering

Explore the risks of deepfake technology in social engineering, learn about a new framework for understanding these attacks, and discover practical countermeasures to protect against synthetic media threats.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

IPvSeeYou - Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation

Explore a data fusion attack on IPv6 home routers for precise street-level geolocation, uncovering millions of devices worldwide and discussing privacy implications.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

FragAttacks - Breaking Wi-Fi through Fragmentation and Aggregation

Explore Wi-Fi vulnerabilities, including design and implementation flaws, and learn how attackers can exploit them for packet injection and data exfiltration in networks.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Generating YARA Rules by Classifying Malicious Byte Sequences

Explore an interpretable ML model for generating optimized malware detection signatures, balancing high detection rates with minimal false positives in ELF executables.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Applying AI as a Service to Targeted Phishing and Defending Against AI Generated Attacks

Explore AI-generated phishing attacks and defense strategies. Learn about AIaaS, its impact on cybersecurity, and techniques to detect and mitigate AI-powered threats.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Zero - The Funniest Number in Cryptography

Explore cryptographic vulnerabilities in BLS signature libraries, focusing on the number zero. Learn about "splitting zero" attacks and their impact on proof-of-possession aggregate signature schemes.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Timeless Timing Attacks

Explore novel timing attacks resilient to network jitter, uncovering vulnerabilities in cryptosystems and applications. Learn about cross-site and Wi-Fi password brute-forcing techniques.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk