Black Hat Courses

Cooper Knows the Shortest Stave - Finding 134 Bugs in the Binding Code of Scripting Languages

Innovative approach to finding bugs in scripting languages through cooperative mutation, combining script code and native input modifications to uncover hidden vulnerabilities in binding code.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

DroidGuard - A Deep Dive into SafetyNet

Explore SafetyNet's internal mechanisms, VM design, and security checks for detecting Magisk, emulators, rooted devices, and Pegasus in this comprehensive analysis of DroidGuard.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Explosion - The Hidden Mines in the Android ION Driver

Uncover vulnerabilities in Android's ION driver, explore root causes, and learn how to achieve privilege escalation. Gain insights into preventing similar security issues in the Android ecosystem.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Non-Intrusive Vulnerability Localization and Hotpatching for Industrial Control Systems

Explore non-intrusive techniques for identifying and patching vulnerabilities in Industrial Control Systems, focusing on specialized requirements of devices like PLCs.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

The Little Seal Bug - Optical Sound Recovery from Lightweight Reflective Objects

Explore an optical side-channel attack that recovers sound from reflective objects in home offices, revealing potential vulnerabilities in remote work environments.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

USMA - Share Kernel Code With Me

Explore Linux kernel attack methods, focusing on gadgets and CFI mitigation. Learn about innovative techniques to overcome limitations and enhance kernel exploitation strategies.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Like Lightning From the Cloud - Finding RCEs in an Embedded TLS Library

Explore techniques for discovering remote code execution vulnerabilities in embedded TLS libraries, with insights on improving security in IoT and embedded systems.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Unix Domain Socket - A Hidden Door Leading to Privilege Escalation in the Android Ecosystem

Explore Unix domain socket vulnerabilities in Android, revealing potential privilege escalation risks and security implications for third-party applications and vendor implementations.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Dynamic Process Isolation

Explore cloud computing security with in-process isolation techniques, addressing vulnerabilities in shared hardware resources while maintaining high performance.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

The Firmware Supply-Chain Security Is Broken - Can We Fix It?

Explores firmware supply chain vulnerabilities, outsourcing risks, and security gaps in hardware products. Discusses challenges in fixing known issues and proposes solutions for improved threat modeling and security.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

The Hidden RCE Surfaces That Control the Droids

Uncover hidden vulnerabilities in Android OS libraries that process incoming files, potentially leading to remote code execution attacks on various system applications.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

To Loot or Not to Loot - That Is Not a Question When State Nexus APT Targets Online Entertainment

Dissecting APT attacks on online entertainment companies, revealing espionage motives beyond financial gain. Analyzes 20+ operations since 2018, exposing tactics and implications for data-rich targets.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

AutoSpear - Towards Automatically Bypassing and Inspecting Web Application Firewalls

Explore techniques for automatically bypassing and inspecting web application firewalls, examining vulnerabilities in WAF-as-a-service solutions and cloud security services.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Hunting and Exploiting Recursive MMIO Flaws in QEMU KVM

Explore security vulnerabilities in QEMU/KVM hypervisors caused by recursive MMIO handling, uncovering a new attack surface with potential for critical exploits in cloud computing environments.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Start Arbitrary Activity App Components as the System User Vulnerability Affecting Samsung Android

Vulnerability in Samsung Android allows zero-permission apps to execute arbitrary activities as system user, compromising device security across multiple Android versions.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk