Black Hat Courses

One Bug to Rule Them All - Stably Exploiting a Preauth RCE Vulnerability on Windows Server 2025

Discover how to exploit CVE-2024-38077, a critical preauth RCE vulnerability affecting Windows Server 2003-2025, bypassing modern security mitigations for 0-click remote code execution.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Unveiling the Mysteries of Qualcomm's QDSP6 JTAG - A Journey into Advanced Theoretical Reverse Engineering

Uncover Qualcomm's QDSP6 JTAG mysteries through advanced theoretical reverse engineering techniques using patent analysis, firmware reverse engineering, and theoretical modeling.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Breaking Matter: Vulnerabilities in the Matter Protocol

Explore the DeeDoS attack against the Matter protocol, a new vulnerability that allows attackers outside a fabric to disable IoT devices, expanding security concerns in the growing connected device ecosystem.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

AML Injection Attacks on Confidential VMs

Discover a critical vulnerability allowing malicious hosts to execute undetected code in confidential VMs through ACPI Machine Language injection, compromising guest data security in cloud environments.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Blast-RADIUS: Breaking RADIUS, the de facto Standard Protocol for Authentication, Authorization and Accounting for Networked Devices

Uncover the Blast-RADIUS vulnerability that allows man-in-the-middle attacks on RADIUS authentication protocol, affecting network routers, VPNs, enterprise Wi-Fi, and more.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Creating Evil Twin Instances of a Class - ClassLoader Exploitation in Android

Explore how third-party Android apps can exploit ClassLoader mechanisms to create malicious Java objects, potentially compromising security without requiring permissions, with practical examples and mitigation strategies.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Heartbeat Havoc: Unveiling Remote Vulnerabilities in Windows Network Load Balancing

Dive into the security analysis of Windows Network Load Balancing, exploring vulnerabilities in the Heartbeat feature including integer overflows, race conditions, and memory issues that can lead to remote code execution or DoS attacks.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Exposing the Dark Corners of SAP - 4 Years of Threat Intelligence Data Analyzed

Dive into an analysis of 4 years of threat intelligence data revealing how threat actors target SAP applications, vulnerability trends, and why ERP security deserves more attention from security professionals.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Apple Disk-O Party - Vulnerabilities in macOS Disk Management Systems

Dive into four disk-related vulnerabilities in Apple systems, exploring diskarbitrationd, diskutil, storagekitd, and Disk Utility to understand sandbox escapes, TCC bypasses, and privilege escalation techniques.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Java Authentication and Authorization Service (JAAS) - A Novel Attack Surface

Explore a novel attack surface in Java security: JAAS (Java Authentication and Authorization Service). Learn how improper implementation can lead to RCE vulnerabilities affecting major vendors and how to securely integrate JAAS into Java libraries.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

UNC1860 and The Temple of Oats - Iran's Hidden Hand in Middle Eastern Networks

Uncover the operations of UNC1860, an Iranian state-sponsored threat actor targeting Middle Eastern networks, including their sophisticated kernel-mode drivers, custom implants, and role as an access broker for Iranian government operations.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Unmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North Korea - Threat Actors, Tactics, and Defense Strategies

Explore the landscape of state-sponsored mobile surveillance malware through case studies from Russia, China, and North Korea, examining targeting methods and previously unreported malware families.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

The Double Agent: Flipping a GenAI Agent Behavior from Serving an Application to Attacking it using Promptwares

Explore PromptWare attacks that can manipulate GenAI agents from serving applications to attacking them, including DoS exploits and Advanced Promptware Threats that conduct reconnaissance and execute malicious activities.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Vulnerabilities in the eSIM Download Protocol

Explore vulnerabilities in the eSIM download protocol, including security weaknesses in TLS encapsulation, trust model issues, and potential SIM swapping risks, with practical mitigation strategies.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Rooting DrayTek Routers Before Attackers Can - When Remote Shells Fall Into The Same Hole

Dive into the discovery of critical vulnerabilities in DrayTek networking devices, including remote code execution and emulator escape techniques, and learn how researchers identified and helped patch these issues before threat actors could exploit them.

• YouTube
• 39 minutes
• Self-Paced
• Free Video