Black Hat Courses

Disinformation at Scale - Using GPT-3 Maliciously for Information Operations

Explores the potential misuse of GPT-3 for large-scale disinformation campaigns, examining its capabilities to generate convincing fake news and the implications for society and information integrity.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Crashing Your Way to Medium-IL - Exploiting the PDB Parser for Privilege Escalation

Discover vulnerabilities in Windows PDB parser, learn exploitation techniques for privilege escalation, and explore the intricacies of memory corruption in DbgHelp.dll.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

DBREACH - Database Reconnaissance and Exfiltration via Adaptive Compression Heuristics

Explore database vulnerabilities through compression side-channel attacks, learning techniques to extract encrypted content and strategies for prevention and patching.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Greybox Program Synthesis - A New Approach to Attack Dataflow Obfuscation

Explore cutting-edge program synthesis techniques for deobfuscation, focusing on intellectual property protection in mobile and embedded systems. Learn about latest advances and practical applications.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Next-Gen DFIR - Mass Exploits & Supplier Compromise

Explore real-world cases of large-scale cyber incidents, focusing on service and software provider compromises. Learn to adapt DFIR processes for global threats and improve incident visibility.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Breaking Network Segregation Using Esoteric Command & Control Channels

Explore novel techniques for lateral movement in segregated networks using unconventional command and control channels, enhancing penetration testing and attack simulation capabilities.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Demystify AI Security Products With a Universal Pluggable XAI Translator

Explore a universal XAI translator to evaluate AI-powered security products, bridging research and practice for informed decision-making in the rapidly evolving field of AI security.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

HPE iLO5 Firmware Security - Go Home Cryptoprocessor, You're Drunk!

Explore vulnerabilities in HPE Gen10 servers' iLO5 management technology, focusing on the "silicon root of trust" and its implications for server security.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

With Friends Like eBPF, Who Needs Enemies?

Explore eBPF's evolution from network monitoring to a powerful Linux kernel observability tool, its security implications, and potential misuse by attackers.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

PCIe Device Attacks - Beyond DMA - Exploiting PCIe Switches, Messages and Errors

Explore advanced PCIe security threats targeting switches and Translation Layer Packets. Learn about novel attack vectors beyond traditional DMA exploits in high-bandwidth peripheral connections.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Over the Air Baseband Exploit - Gaining Remote Code Execution on 5G Smartphones

Explore 5G network security, baseband vulnerabilities, and remote code execution on smartphones through hands-on research, methodology, and live demonstrations.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

An Offensive Approach to Analyzing Huge and Complex Big Data Infrastructures

Explore attack vectors in Big Data stack layers: ingestion, storage, processing, and access. Learn methodologies to identify vulnerabilities in complex infrastructures handling massive data volumes.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Wibbly Wobbly, Timey Wimey – What's Really Inside Apple's U1 Chip

Explore Apple's U1 Ultra Wideband chip, its capabilities, and potential applications. Dive into firmware, kernel components, and user space modifications for this cutting-edge technology.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Rope - Bypassing Behavioral Detection of Malware with Distributed ROP-Driven Execution

Explore a novel covert distributed execution technique for malware that challenges behavioral detection by AV and EDR solutions, using ROP-driven execution across multiple processes.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Uncovering Planned Obsolescence Practices in Robotics and What This Means for Cybersecurity

Explore systematic "robot teardown" to understand and repair robots, uncovering planned obsolescence practices and their implications for cybersecurity in robotics.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk