Black Hat Courses

The Drone Supply Chain's Grand Siege - From Initial Breaches to Long-Term Espionage

Uncover Earth Ammit's sophisticated supply-chain attacks targeting drone manufacturers, analyzing TIDRONE and VENOM campaigns with multi-stage intrusion strategies and evolving TTPs.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Impostor Syndrome - Hacking Apple MDMs Using Rogue Device Enrolments

Uncover critical vulnerabilities in Apple's Mobile Device Management systems through reverse engineering, security bypass techniques, and exploitation of enterprise misconfigurations.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Dismantling the SEOS Protocol

Discover how to reverse-engineer HID SEOS RFID protocol through the first open source implementation, revealing security insights for access control systems used in corporate environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

The ByzRP Solution - A Global Operational Shield for RPKI Validators

Discover how Byzantine RPKI (ByzRP) creates a robust, distributed shield against routing security attacks, bypassing RPKI vulnerabilities with zero downtime for global network protection.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

AI-Powered Image-Based Command and Control Framework - Utilizing AI Models to Conceal and Extract Commands in C2 Images

Explore how AI models can be weaponized to create sophisticated steganographic C2 frameworks that evade traditional detection methods through machine learning-based encoding.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

The Problems of Embedded Python in Excel - How to Excel in Pwning Pandas

Discover security vulnerabilities in Microsoft's Python-in-Excel feature, including attack surfaces, binary execution methods, and data exfiltration techniques.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

The New Frontline - Cyber on the Precipice

Discover the evolving cyber threat landscape where AI distorts reality, ransomware becomes subscription-based, and attacks target people and institutions beyond traditional infrastructure.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Three Decades in Cybersecurity - Lessons Learned and What Comes Next

Discover three decades of cybersecurity evolution through pivotal cyber-attacks from ILOVEYOU to WannaCry, plus insights into future threats from malware research expert Mikko Hypponen.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Free Video

KernelSnitch - Leaking Kernel Heap Pointers by Exploiting Software-Induced Side-Channel Leakage

Discover a novel software-induced side-channel attack on Linux kernel hash tables that enables byte-accurate heap pointer leaks without memory vulnerabilities, working across architectures.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

CDN Cannon - Exploiting CDN Back-to-Origin Strategies for Amplification Attacks

Uncover critical CDN vulnerabilities enabling massive amplification attacks that bypass DDoS protections, demonstrated through Back-to-Origin strategies and mitigation approaches.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

State Manipulation - Unveiling New Attack Vectors in Bluetooth Vulnerability Discovery through Protocol State Machine Reconfiguration

Uncover hidden Bluetooth vulnerabilities by manipulating protocol state machines, exploring attack vectors beyond traditional security flaws in automotive and IoT devices.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Inbox Invasion - Exploiting MIME Ambiguities to Evade Email Attachment Detectors

Discover how adversaries exploit MIME parsing discrepancies to bypass email security systems and evade malware detection through systematic vulnerability analysis.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Tinker Tailor LLM Spy - Investigate and Respond to Attacks on GenAI Chatbots

Discover how to investigate and respond to attacks on GenAI chatbots, including prompt injection incidents, using AI defense tooling and LLM guardrails for effective incident response.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

JDD - In-depth Mining of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction

Discover advanced techniques for mining Java deserialization vulnerabilities using bottom-up gadget search and dataflow-aided payload construction to identify zero-day exploits.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Think Inside the Box - In-the-Wild Abuse of Windows Sandbox in Targeted Attacks

Discover how APT groups exploit Windows Sandbox for evasion, analyzing Earth Kasha's tactics and learning defensive countermeasures for threat hunting.

• YouTube
• 25 minutes
• Self-Paced
• Free Video