Black Hat Courses

Brute-Forcing Lockdown Harddrive Pin Codes

Explore techniques for bypassing AES-256 encrypted hard drive security through front-panel keyboard spoofing and internal design analysis, building on previous research.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Building a Product Security Incident Response Team - Learnings From the Hivemind

Building a Product Security Incident Response Team: Best practices, templates, and actionable recommendations for small to medium companies to establish effective PSIRT processes and respond to vulnerability reports.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Side-Channel Attacks on Everyday Applications

Explore FLUSH+RELOAD side-channel attacks beyond cryptography, demonstrating their potential to leak information from everyday applications like web browsers and text editors.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Unleash the Infection Monkey - A Modern Alternative to Pen-Tests

Explore a new open-source tool for testing network security resilience. Learn how the Infection Monkey simulates attacks, uncovers vulnerabilities, and provides a cost-effective alternative to traditional penetration testing methods.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Security Through Design - Making Security Better by Designing for People

Explore user-centered design methods to create more effective and user-friendly security processes, tools, and communication strategies, improving corporate productivity and security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Hacking Next-Gen ATMs - From Capture to Cashout

Explore advanced ATM hacking techniques, including bypassing anti-skimming methods, NFC long-range attacks, and automated cash-out systems. Learn about vulnerabilities in EMV implementations and future credit card data risks.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Analysis of the Attack Surface of Windows 10 Virtualization-Based Security

Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Cunning With CNG - Soliciting Secrets From Schannel

Explore Schannel's internal security, CNG key caching, and forensic implications. Learn to extract and leverage TLS/SSL connection data for decryption and analysis of ephemeral key exchanges.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

The Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android

Explore Android's evolving security landscape, examining threats, vulnerabilities, and defensive measures. Learn how the Android Security Team addresses challenges and implements new features to protect users.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Advanced CAN Injection Techniques for Vehicle Networks

Explore advanced techniques for injecting CAN messages into vehicle networks, bypassing restrictions on physical control systems like brakes, steering, and acceleration.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

TCP Injection Attacks in the Wild - A Large Scale Study

Comprehensive survey of TCP injection attacks, revealing commercial and non-commercial false content injections on the web. Explores detection methods, identifies injectors, and proposes client-side mitigation techniques.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Ouroboros - Tearing Xen Hypervisor With the Snake

Explore a critical verification bypass bug in Xen hypervisor, allowing malicious PV guest OS to control the hypervisor and other guest operating systems. Learn about exploitation vectors and payloads.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Defense at Hyperscale - Technologies and Policies for a Defensible Cyberspace

Explore strategies for achieving defensible cyberspace through innovative technologies, operational improvements, and public policies that provide cost-effective security at scale.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

What's the DFIRence for ICS?

Explore digital forensics for industrial control systems, focusing on embedded devices in critical infrastructure. Learn data collection and analysis techniques for RTUs in electric substations.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Pindemonium - A DBI-Based Generic Unpacker for Windows Executable

Explore a generic unpacking algorithm for Windows executables using Dynamic Binary Instrumentation. Learn to detect and defeat popular packing techniques, reconstruct working PEs, and handle IAT obfuscation.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk