Black Hat Courses

Do You Speak My Language? Make Static Analysis Engines Understand Each Other

Explore a novel framework for cross-language taint-flow analysis, enabling detection of critical security vulnerabilities across multiple codebases and programming languages.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Measure Security Effectively

Learn strategies to quantify cybersecurity effectiveness, determine ROI, and communicate results from the security trenches to the boardroom, addressing a key industry challenge.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Conclusions and Key Takeaways from Black Hat Asia 2022

Insightful discussion on pressing InfoSec issues, trends, and future strategies by Black Hat Asia Review Board members, covering topics like stress testing, sanctions, governance, and emerging technologies.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Hacking Democracy - Will Our Societies Hold?

Explore the impact of digital technologies on democratic societies and the challenges they pose to governance, social cohesion, and political stability in this thought-provoking keynote.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

SideWinder Uncoils to Strike

Explore the aggressive SideWinder threat actor's tactics, infection chain, and infrastructure. Learn about their evolving techniques and effective mitigation strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The Next Gen PlugX - ShadowPad - A Dive into the Emerging China-Nexus Modular Trojan, Pangolin8RAT

Explore the emerging Pangolin8RAT trojan, its potential as a successor to PlugX and ShadowPad in Chinese cyber operations, and its attack timeline from 2020 to 2021.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

From Coordinated Disclosure to Cooperative Vulnerability Research When Dealing with Critical Software Stacks

Explore evolving approaches to vulnerability disclosure in critical software, emphasizing early cooperation between researchers and vendors for improved security outcomes.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

ECMO - Rehost Embedded Linux Kernels via Peripheral Transplantation

Innovative technique for rehosting embedded Linux kernels in QEMU using peripheral transplantation, enabling dynamic analysis of firmware images from diverse embedded devices.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

A Universal Way to Exploit Android PendingIntents in High-profile and System Apps

Explore Android PendingIntent vulnerabilities in high-profile apps, learn exploitation techniques, and discover security implications for developers and system integrity.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

The Black Hat Europe NOC Report

Explore the evolution of Black Hat's Network Operations Center, adapting to virtual events while maintaining security. Learn about infrastructure, tools, and challenges in managing a notorious network.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Building Better CSIRTs Using Behavioral Psychology

Explore behavioral psychology insights to improve CSIRT effectiveness, addressing team dynamics, communication, and collaboration challenges for enhanced incident response.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Message in a Broken Bottle - Exploring the Linux IPC Attack Surface

Explore Linux's IPC attack surface, focusing on systemd and dbus-daemon. Discover vulnerabilities in system services and learn about potential security risks in Linux's userspace processes.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

How We Can Power Real Security Machine Learning Progress Through Open Algorithms and Benchmarks

Explore the need for transparency in security machine learning, discussing challenges, benefits, and strategies for fostering openness to drive real progress in the field.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Exploiting CSP in WebKit to Break Authentication and Authorization

Uncover a critical WebKit vulnerability that compromises authentication and authorization in web applications, exposing weaknesses in browser security features and their implementation.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks

Explore new Active Directory protocol injection attacks, focusing on NTLM and Kerberos vulnerabilities. Learn about attack scenarios, mitigation strategies, and essential tips for defenders.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk