Black Hat Courses

Complexity Killed Security

Explore how increasing hardware complexity impacts software security, challenges in documentation access, and potential solutions for modern cybersecurity threats.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

How I Created My Clone Using AI - Next-Gen Social Engineering

Explore AI-powered impersonation techniques for advanced social engineering attacks, including text, voice, and video cloning. Live demonstrations showcase creating realistic digital doppelgangers for online deception.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Multiple Bugs in Multi-Party Computation - Breaking Cryptocurrency's Strongest Wallets

Explore vulnerabilities in advanced cryptographic methods for cryptocurrency wallets, focusing on multi-party computation and threshold signature schemes. Learn about potential attacks and security considerations.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Healthscare – An Insider's Biopsy of Healthcare Application Security

Insider's examination of vulnerabilities in healthcare systems, including radiology, EMR, pharmacy, and clinical documentation. Highlights security issues and proposes solutions for the healthcare industry.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Spectra - Breaking Separation Between Wireless Chips

Explore wireless spectrum sharing challenges, coexistence mechanisms, and potential vulnerabilities in Wi-Fi and Bluetooth chips, with focus on smartphone security implications.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Lateral Movement and Privilege Escalation in GCP - Compromise Organizations without Dropping an Implant

Explore techniques for identity compromise, privilege escalation, and lateral movement in Google Cloud. Learn about GCP's unique security model and default permissions, with demonstrations and tool releases.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

You Have No Idea Who Sent That Email - 18 Attacks on Email Sender Authentication

Uncover 18 email sender authentication attacks, their impact on popular providers, and defense strategies in this eye-opening exploration of email security vulnerabilities.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

An Unauthenticated Journey to Root - Pwning Your Company's Enterprise Software Servers

Uncover critical vulnerabilities in SAP enterprise software, exploring unauthenticated access to root privileges. Learn attack steps, prevention strategies, and potential impacts on Fortune 1000 companies.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

HTTP Request Smuggling in 2020 - New Variants, New Defenses and New Challenges

Explore new variants, defenses, and challenges of HTTP Request Smuggling, an attack technique exploiting interpretations of non-standard HTTP requests between client and server.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Engineering Empathy - Adapting Software Engineering Principles and Process to Security

Explore how software engineering principles can enhance security practices, featuring insights from a role-reversal experiment between security and runtime teams.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Hacking the Supply Chain - The Ripple20 Vulnerabilities Haunt Tens of Millions of Critical Devices

Exposición sobre vulnerabilidades críticas Ripple20 que afectan a millones de dispositivos IoT en diversos sectores, detallando su descubrimiento, impacto y explotación técnica.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Stealthily Access Your Android Phones - Bypass the Bluetooth Authentication

Explore Android Bluetooth vulnerabilities, including BlueRepli, and learn stealthy access techniques. Discover security risks in AOSP and mobile manufacturers' oversights.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Web Cache Entanglement - Novel Pathways to Poisoning

Explore novel web cache poisoning techniques, probing cache inconsistencies to build sophisticated exploit chains. Learn to uncover vulnerabilities in caching systems across the internet.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

My Cloud is APT's Cloud - Investigating and Defending Office 365

Investigate and defend Office 365 against sophisticated attacks. Learn authentication types, attack lifecycle, and effective countermeasures for cloud-based enterprise security.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

IMP4GT - IMPersonation Attacks in 4G Networks

Explore IMP4GT attacks in 4G networks, revealing vulnerabilities in LTE security. Learn about impersonation techniques, their impact, and consequences for users and law enforcement.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk