Black Hat Courses

Managing for Success - Maintaining a Healthy Bug Bounty Program Long Term

Strategies for maintaining an effective bug bounty program, focusing on incentives, communication, and researcher relationships to ensure high-value vulnerability reports and long-term success.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Ghidra - Journey from Classified NSA Tool to Open Source

Explore NSA's journey in developing and open-sourcing Ghidra, a powerful software reverse engineering framework. Learn about its features, impact, and future developments.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

How to Detect that Your Domains are Being Abused for Phishing by Using DNS

Learn to protect your domains from phishing attacks using DNS and email security protocols like SPF, DKIM, and DMARC. Discover advanced techniques for detecting and preventing domain abuse.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Bounty Operations - Best Practices and Common Pitfalls to Avoid in the First 6-12 Months

Insights from experienced bug bounty managers on program operations, triage strategies, and common vulnerabilities. Learn best practices and avoid pitfalls for successful bounty programs.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Zombie Ant Farming - Practical Tips for Playing Hide and Seek with Linux EDRs

Explore techniques to evade Linux EDRs, including using approved executables as decoys and leveraging dynamic ELF loader primitives for stealthy post-exploitation capabilities.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Debug for Bug - Crack and Hack Apple Core by Itself

Explore Apple kernel vulnerabilities through fuzzing, including double free and out-of-bounds issues. Learn about debugging and fuzzing techniques for uncovering security flaws in Apple's core systems.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Operational Templates for State-Level Attack and Collective Defense of Countries

Explore templates for nation-level cyber attacks and defense strategies, examining various time horizons, attribution levels, and collective approaches to protect countries in cyberspace.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Infighting Among Russian Security Services in the Cyber Sphere

Explore the complex dynamics of Russian security agencies in cyberspace, examining conflicts, international campaigns, and their implications for global cybersecurity.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Exploring the New World - Remote Exploitation of SQLite and Curl

Discover new methods for finding vulnerabilities in SQLite and Curl through fuzzing and manual auditing, including insights on "Magellan" and "Dias" vulnerabilities.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Critical Zero Days Remotely Compromise the Most Popular Real-Time OS

Explore critical vulnerabilities in VxWorks, a popular real-time OS, and their potential for remote network breaches and device exploitation. Includes live demonstrations on various devices, including medical equipment.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

DevSecOps - What, Why, and How

Explore the transformation of DevOps to DevSecOps, its benefits, and implementation using open-source tools across various deployment platforms, with practical demonstrations.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Firmware Cartography - Charting the Course for Modern Server Compromise

Explore undocumented server vulnerabilities through firmware analysis. Learn methodologies, tools, and techniques for uncovering security flaws in hardware-software interactions and exploiting weak controls.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Making Big Things Better - The Dead Cow Way

Explore the evolution and impact of hacker group Cult of the Dead Cow with key members, discussing their journey from teenage misfits to industry leaders and their contributions to cybersecurity and activism.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Mobile Interconnect Threats - How Next-Gen Products May Be Already Outdated

Explore vulnerabilities in mobile networks, focusing on SS7 security flaws, potential attacks, and risks to subscriber privacy and communication integrity.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Finding Our Path - How We're Trying to Improve Active Directory Security

Explore strategies to enhance Active Directory security, focusing on enumeration, risk assessment, and mitigation techniques for networks of all sizes.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk