Black Hat Courses

A Deep Dive into Privacy Dashboard of Top Android Vendors

Uncovers flaws in Android vendors' privacy dashboards, revealing how malicious apps can bypass monitoring and benign apps trigger false alarms. Explores implementation differences across top vendors.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

ChaosDB - How We Hacked Databases of Thousands of Azure Customers

Uncover the critical ChaosDB vulnerability in Azure Cosmos DB, allowing unauthorized access to thousands of customer databases. Learn about the discovery, exploitation, and implications of this unprecedented cloud security flaw.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Picking Lockfiles - Attacking & Defending Your Supply Chain

Explore supply chain vulnerabilities in open source software, focusing on lockfile attacks. Learn offensive and defensive techniques to enhance project security.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

No Such Thing as a Stupid Question - Why Knowledge Shaming is Making Us Less Secure

Explores how knowledge shaming hinders cybersecurity progress, offering guidelines for effective knowledge sharing and consumption to foster a more secure and collaborative industry environment.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Who Did It - How We Attributed Campaigns of a Cyber Mercenary

Uncover the tactics of a cyber mercenary operating in underground forums, exploring their global campaigns, targeting methods, and strategic operations from 2016-2021.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Practical Attacks Against Attribute-based Encryption

Explore practical attacks on attribute-based encryption, examining vulnerabilities in multi-authority schemes and their implications for cloud security and IoT applications.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Hardware Security Module - Executing Unsigned Code in HSM TEE

Explore a novel attack on HSM digital signature verification, enabling execution of unsigned code in protected environments. Insights applicable to similar systems.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

A Survivor-Centric, Trauma-Informed Approach to Stalkerware

Comprehensive overview of stalkerware, its impact, and survivor-centric approaches to support victims, emphasizing trauma-informed practices and ethical considerations.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Action Bias and the Two Most Dangerous Words in Cybersecurity

Explore action bias in cybersecurity, examining when immediate responses are beneficial or counterproductive, and learn strategies for effective decision-making during crises.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Another Road Leads to the Host - From a Message to VM Escape on Nvidia vGPU

Explore vulnerabilities in NVIDIA vGPU, focusing on security risks in cloud infrastructures. Learn about potential VM escape techniques and their implications for AI, deep learning, and cloud gaming.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Fixing a Memory Forensics Blind Spot - Linux Kernel Tracing

Explore Linux kernel tracing infrastructure and its impact on memory forensics. Learn about blind spots in defensive research and strategies to enhance detection of sophisticated attackers.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Mobius Band - Explore Hyper-V Attack Interface through Vulnerabilities Internals

Explore Hyper-V vulnerabilities and attack interfaces, focusing on 3 RCE vulnerabilities in Microsoft's virtualization solution. Gain insights into cloud security and potential risks.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

MFA-ing the Un-MFA-ble - Protecting Auth Systems' Core Secrets

Explore advanced techniques for securing authentication systems against credential compromise, focusing on protecting core secrets and implementing multi-factor authentication for critical components.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Legal Pitfalls to Avoid in Security Incidents

Explore real-world examples of lawyer-security professional collaboration during security incidents, focusing on legal pitfalls and effective communication strategies.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

CnCHunter - An MITM-Approach to Identify Live CnC Servers

Systematic tool for efficiently discovering live CnC servers using MITM approach, overcoming challenges of changing locations, proprietary protocols, and encryption in botnet communication.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk