Black Hat Courses

Revealing the Secrets of Siemens S7 PLCs

Uncover vulnerabilities in Siemens ET 200SP SoftPLC, exploring its architecture, boot process, and potential attack vectors. Learn about PC-based PLCs and their security implications in industrial control systems.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Chasing Your Tail With a Raspberry Pi

Methodology for detecting wireless signal tracking using low-cost hardware and Python. Covers SIGINT techniques, MAC address randomization, and provides code for DIY implementation.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Eliminating Triage Intermediaries for Zero-day Exploits Using a Decentralised Payout Protocol

Explore a protocol for collectivizing security bounties, enabling companies to showcase software security and ethical hackers to retrieve bounties without ambiguity, eliminating subjectivity in triage processes.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Déjà Vu - Uncovering Stolen Algorithms in Commercial Products

Techniques for detecting unauthorized use of algorithms in commercial products, including search methods, reverse-engineering, and a real-world case study. Provides strategies for addressing IP theft and prevention.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Ghost in the Wireless - iwlwifi Edition

Explore Intel Wi-Fi chip vulnerabilities through reverse-engineering, uncovering firmware exploits and code execution risks in complex features like Wake-on-WLAN and TDLS.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Cautious - A New Exploitation Method! No Pipe but as Nasty as Dirty Pipe

Unveils a novel exploitation technique surpassing Dirty Pipe, enabling arbitrary file overwriting and privilege escalation through double-free vulnerabilities, applicable across affected kernel versions.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Do Not Trust the ASA, Trojans

Explore vulnerabilities in Cisco ASA firewalls, including ASDM package verification issues and FirePOWER module exploits. Learn to create malicious packages and gain root access.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Go With the Flow - Enforcing Program Behavior Through Syscall Sequences and Origins

Explore syscall-flow-integrity protection (SFIP) to enhance application security by limiting control flow across user-to-kernel transfers, addressing vulnerabilities in complex software systems.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

How Firefox Uses In-process Sandboxing to Protect Itself From Exploitable Libraries

Explore Firefox's innovative approach to mitigating zero-day attacks using in-memory sandboxes for third-party C libraries, enhancing security against memory safety vulnerabilities.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Devils Are in the File Descriptors - It Is Time To Catch Them All

Explore vulnerabilities in Linux kernel file descriptor operations, focusing on high-risk scenarios in exporting and importing, and learn to identify and address these security concerns.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

ELF Section Docking - Revisiting Stageless Payload Delivery

Explore advanced techniques for embedding and loading static payloads in Linux malware, focusing on ELF binary construction and section manipulation to enhance payload survival and evasion.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

How Supercomputer-Scale Neural Network Models Apply to Defensive Cybersecurity Problems

Explore how large-scale neural networks revolutionize cybersecurity, enabling custom explanations of attacker behavior and improved threat detection with limited data. Learn to leverage public models like GPT-3 for security applications.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Demystifying Key Stretching and PAKEs

Explore key stretching and PAKEs: their history, best practices, and applications in encrypted cloud services. Learn to create toy algorithms and understand their importance in cybersecurity.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

DNSSEC Downgrade Attacks

Explore DNSSEC vulnerabilities and cryptographic agility risks, revealing how adversaries can manipulate DNS responses to compromise security and prevent DNSSEC validation.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

The Battle Against the Billion-Scale Internet Underground Industry - Advertising Fraud Detection

Explore the escalating war between internet advertising fraud and anti-fraud efforts. Analyze typical underground industry gangs and their evolving tactics in this high-stakes technological confrontation.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk