Black Hat Courses

Attacking IOBluetoothFamily HCI and Vendor-Specific Commands

Explores vulnerabilities in Bluetooth stacks, focusing on Host-Controller Interface (HCI) and vendor-specific commands. Demonstrates attack techniques and discusses security implications for MacOS and iOS devices.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Bypassing NGAV for Fun and Profit

Explore methodologies to reverse engineer and bypass next-generation anti-virus (NGAV) models, focusing on adversary learning techniques and challenges in cybersecurity.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

LadderLeak - Breaking ECDSA with Less than One Bit of Nonce Leakage

Explores ECDSA vulnerabilities, focusing on nonce leakage attacks. Presents LadderLeak, a novel technique breaking ECDSA with minimal nonce exposure, and discusses implications for cryptographic implementations.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

POSWorld - Should You Be Afraid of Hands-On Payment Devices

Explore the vulnerabilities of Point of Sale terminals, uncovering security flaws in hardware, software, and file systems that enable cloning and fraud in the dark market.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Hacking Government Cybersecurity

Explore latest cybersecurity developments in government, risk management at scale, and collaboration with industry and hackers. Learn about hacking mindset and cyber volunteering.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

How Embedded TCP-IP Stacks Breed Critical Vulnerabilities

Explore critical vulnerabilities in embedded TCP/IP stacks, their impact on system security, and techniques for analysis and mitigation in networked embedded systems.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Effective Vulnerability Discovery with Machine Learning

Explore machine learning techniques for effective vulnerability discovery in software dependencies, enhancing security analysis beyond traditional methods.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Securing the Next Version of HTTP - How QUIC and HTTP-3 Compare to HTTP-2

Explore QUIC and HTTP/3 protocols, their security features, and improvements over HTTP/2. Learn about encryption, handshakes, and performance enhancements in next-gen web communication.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Raiden Glitching Framework

Explore voltage glitching for hardware hacking, bypassing security mechanisms, and disclosing firmware secrets using the Raiden framework and Python API.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

From Zero to Sixty - The Story of North Korea's Rapid Ascent to Becoming a Global Cyber Superpower

Explore North Korea's rise as a cyber superpower through technical analysis and strategic insights, featuring demonstrations of rare malware variants and their global impact.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Hey Google, Activate Spyware! - When Google Assistant Uses a Vulnerability as a Feature

Explore Android vulnerabilities allowing unauthorized camera control, revealing security flaws in Google Assistant and discussing implications for user privacy and smartphone security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

3D Red Pill - A Guest-to-Host Escape on QEMU/KVM Virtio Device

Demonstration of a guest-to-host escape exploit on QEMU/KVM virtio-gpu devices, showcasing vulnerability analysis, exploitation techniques, and potential security solutions.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices

Discover critical Wi-Fi security vulnerabilities affecting billions of devices, including Amazon Echo. Learn about Kr00k, its impact, and see a live demonstration of the exploit.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

ZombieLoad - Leaking Data on Intel CPUs

Explore ZombieLoad, a critical Intel CPU vulnerability. Learn about its mechanics, implications for data security, and potential exploits through demonstrations and insights.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Wi-Fi Brokering

Explore Wi-Fi network vulnerabilities and advanced attack techniques, focusing on 802.1X networks and PEAP authentication methods. Learn about relaying challenges and responses for unauthorized access.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk