Black Hat Courses

Confused Learning: Supply Chain Attacks Through Machine Learning Models

Explore novel ML model vulnerabilities, including malware distribution and data exfiltration. Learn to create, distribute, and analyze ML malware, with insights on threat hunting and mitigation strategies.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Chinese APT - Exploiting Edge Devices for Surveillance and Attacks

Revelación de ataques de APT chinos a dispositivos de borde, incluyendo un 0-day en routers de vigilancia. Se analizan casos de estudio y se proponen estrategias de mitigación.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Cloud Console Cartographer: Tapping Into Mapping - Slogging Through Logging

Explore an open-source framework for deciphering cloud console logs, enhancing threat detection and incident response in cloud environments. Learn to differentiate user actions from system-generated events.

• YouTube
• 39 minutes
• On-Demand
• Free Video

China's Military Cyber Operations - Strategic Support Force's Evolution and Challenges

Análisis de las operaciones cibernéticas militares de China y el papel de la Fuerza de Apoyo Estratégico, examinando su evolución, capacidades y desafíos en el contexto geopolítico del Indo-Pacífico.

• YouTube
• 41 minutes
• On-Demand
• Free Video

CertifiedDCOM - The Privilege Escalation Journey to Domain Admin with DCOM

Uncover a critical DCOM vulnerability allowing remote privilege escalation to Domain Admin in Windows networks. Learn about DCOM internals and exploit techniques for Active Directory takeover.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Bypassing Entra ID Conditional Access - A Deep Dive Into Device Authentication Mechanisms

Explore device authentication in Entra ID, uncovering vulnerabilities in Conditional Access. Learn about attack methods, defense strategies, and gain insights into Microsoft's cloud security infrastructure.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Breaking Managed Identity Barriers in Azure Services

Explore novel approaches to bypass Managed Identities security in Azure Functions and Machine Learning, uncovering vulnerabilities that allow stealthy persistence and token extraction.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Back to the Roots - Finding the Origin of CSP Security Bugs

Explore the root causes of Content Security Policy bugs in web browsers, their lifecycle, and insights for both attackers and defenders using automated analysis tools.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Bad Randomness - Protecting Against Cryptography's Perfect Crime

Explore cryptography's vulnerability to bad randomness, examining real-world attacks and proposing novel solutions to enhance security in digital systems and blockchain transactions.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Attacking Debug Modules in the Android Ecosystem

Explore security vulnerabilities in Android debug modules, focusing on vendor-specific implementations. Learn about attack surfaces, real-world cases, and mitigation strategies for Android ecosystem security.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Fuzzing Windows RDP Client for Vulnerabilities - A Research Journey

Explore Windows RDP client vulnerability research: from initial steps to uncovering remote code execution flaws. Learn about fuzzing tools, overcoming challenges, and recommendations for RDP security.

• YouTube
• 24 minutes
• On-Demand
• Free Video

LogoFAIL - Security Implications of Image Parsing During System Boot

Uncovers critical vulnerabilities in BIOS image parsing libraries, allowing attackers to exploit boot processes for code execution and compromising system security at the firmware level.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Dissecting an iOS 0-Day - Sweet QuaDreams or Nightmare Before Christmas?

Dissection of an iOS 0-day exploit used by private sector offensive actors, exploring its capabilities, impact, and implications for cybersecurity and government surveillance.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Evils in the Sparse Texture Memory - Exploiting Kernel Vulnerabilities in GPU APIs

Unveils vulnerabilities in PowerVR GPU, demonstrating exploits using OpenGL APIs. Explores physical page UAF issues in sparse texture memory management, offering detection solutions and a device rooting demo.

• YouTube
• 40 minutes
• On-Demand
• Free Video

A Decade After Stuxnet - How Siemens S7 is Still an Attacker's Heaven

Reverse-engineering of Siemens S7-1500 PLC reveals security vulnerabilities, including obfuscated communication and modified cryptography, demonstrating persistent weaknesses a decade after Stuxnet.

• YouTube
• 39 minutes
• On-Demand
• Free Video