Black Hat Courses

Fooling Windows Through Superfetch

Examines how Superfetch records Windows activity in scenario files and how those records can be manipulated to fool SysMain.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Hacking the Voter - Lessons from a Decade of Russian Military Operations

Learn how the GRU’s strategic view of information shaped election interference operations across several countries over nearly a decade.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Superman Powered by Kryptonite - Turn the Adversarial Attack into Your Defense Weapon

Explores how reverse engineering and training a patch can turn adversarial attacks on CAPTCHAs into a defense.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Kr00k - Serious Vulnerability Affected Encryption of Billion+ Wi-Fi Devices

A demonstration of Kr00k shows how Wi-Fi reassociations could leave WPA2 packets encrypted with an all-zero key, allowing an attacker to decrypt them.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

A Little Less Speculation, a Little More Action - A Deep Dive into Fuchsia's Mitigations for Specific CPU Side-Channel Attacks

A look at how Fuchsia engineers adapted and tested defenses against CPU side-channel attacks across x86 and ARM processors.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Exploiting Kernel Races through Taming Thread Interleaving

A technique for extending exploitable timing windows by taming thread interleaving in kernel races that brute-force attempts cannot reliably trigger.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

IoT Skimmer - Energy Market Manipulation through High-Wattage IoT Botnets

A study of how high-wattage IoT botnets could quietly shift grid demand to manipulate deregulated electricity markets.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Improving Mental Models of End-to-End Encrypted Communication

Examines how users misunderstand end-to-end encrypted messaging and how those mental models affect secure communication choices and authentication ceremonies.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Hackers, Journalists and the Ethical Swamp

An analysis of five high-profile hacking incidents traces how hackers work with and sometimes manipulate news media.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Debug for Bug - Crack and Hack Apple Core by Itself

Demonstrates fuzzing and LLDB-based debugging to uncover vulnerabilities in the Apple kernel.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Operational Templates for State-Level Attack and Collective Defense of Countries

State-level attack and defense templates show how adversaries could disrupt countries across different time horizons and levels of attribution.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Mobile Interconnect Threats - How Next-Gen Products May Be Already Outdated

It examines how attackers can exploit SS7 access to locate subscribers, access profile data, and intercept communications as the network’s walled-garden model erodes.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Portable Automotive Security Testbed with Adaptability

PASTA presents a portable, adaptable testbed for demonstrating and evaluating automotive security techniques, with a proof-of-concept example.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Come Join the CAFSA - Continuous Automated Firmware Security Analysis

A practical account of integrating automated firmware security analysis into device development and release workflows.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Sensor and Process Fingerprinting in Industrial Control Systems

Use inherent sensor noise and process behavior as fingerprints to detect cyber and physical attacks on industrial systems.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk