Black Hat Courses

A Framework for Evaluating and Patching the Human Factor in Cybersecurity

Explore a framework for assessing and improving human-related cybersecurity vulnerabilities, focusing on evaluating and enhancing the human factor in security systems.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Demystifying Modern Windows Rootkits

Explore Windows rootkit development, from basic drivers to advanced hooking techniques. Learn about kernel-mode malware, network stack manipulation, and innovative methods to evade detection.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Office Drama on macOS

Explore macOS-specific Office macro attacks, their growing popularity, and unique exploit techniques. Learn about analysis, sandbox bypassing, and detection methods for these emerging threats.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Hiding Process Memory via Anti-Forensic Techniques

Explore novel anti-forensic techniques for hiding malicious process memory, evading detection by memory analysis tools while maintaining accessibility for malware functionality.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Security Research on Mercedes-Benz - From Hardware to Car Control

Explore Mercedes-Benz car security research, from hardware analysis to gaining control. Learn about attack surfaces, reverse engineering, and cloud control in modern connected vehicles.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Plundervolt - Flipping Bits from Software without Rowhammer

Discover Plundervolt: a software-based fault attack that threatens system security without physical access. Learn its mechanisms, potential impacts, and how it compares to Rowhammer.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep Learning

Explore deep-learning techniques to identify and reduce side-channel attack vulnerabilities, leveraging AI explainability for efficient implementation assessment and improved security.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Emulating Samsung's Baseband for Security Testing

Explore Samsung baseband security through emulation, enabling scalable vulnerability research and debugging for cellular network protocols.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Needing the DoH - The Ongoing Encryption and Centralization of DNS

Explore DNS encryption's impact on internet privacy, security, and network operations. Delve into DoT and DoH standards, their implications for users and providers, and the shift towards centralized DNS.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

TiYunZong Exploit Chain to Remotely Root Modern Android Devices - Pwn Android Phones from 2015-2020

Comprehensive exploit chain analysis for remotely rooting modern Android devices, focusing on Pixel phones. Explores attack surfaces, introduces new vulnerabilities, and demonstrates practical exploitation techniques.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Reverse Engineering the Tesla Battery Management System to Increase Power Available

Explore Tesla's Battery Management System reverse engineering, focusing on power upgrades in performance models. Learn about architecture, data structures, and hardware modifications for enhanced vehicle performance.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Ruling StarCraft Game Spitefully - Exploiting the Blind Spot of AI-Powered Game Bots

Explore techniques to exploit vulnerabilities in AI-powered game bots, focusing on StarCraft. Learn about deep reinforcement learning, adversarial attacks, and potential defenses in gaming AI.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Breaking VSM by Attacking SecureKernel

Explore vulnerabilities in Windows 10's SecureKernel, potentially compromising Virtualization-Based Security. Learn exploitation techniques and the process of finding and fixing critical security flaws.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Practical Defenses Against Adversarial Machine Learning

Explore real-world attacks on ML systems, from recommendation engines to email filters, and learn practical defense strategies against adversarial machine learning threats.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Detecting Access Token Manipulation

Demystifying Windows access token manipulation attacks and providing effective detection strategies for defensive practitioners in enterprise environments.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk