Black Hat Courses

I'm Unique, Just Like You - Human Side-Channels and Their Implications for Security and Privacy

Human behaviors can create invisible identifiers that distinguish and track people online, with consequences for security and privacy.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Intel VISA - Through the Rabbit Hole

Use Intel VISA to read signals from hidden PCH buses and reveal security-sensitive devices inside Intel chipsets.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

I'm Unique, Just Like You - Human Side-Channels and Their Implications for Security and Privacy

Explores how unintentional identifiers created by human behavior can uniquely identify and track people in the digital realm.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Worm Charming - Harvesting Malware Lures for Fun and Profit

Use YARA rules and VirusTotal intelligence to surface interesting malware samples, then explore clustering and automation techniques through practical labs.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

ACSploit - Exploit Algorithmic Complexity Vulnerabilities

Explore how spacetime analysis and targeted test cases can expose algorithmic complexity flaws, with demonstrations using ACSploit and C.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Winter is Coming Back - Defeating the Most Advanced Rowhammer Defenses to Gain Root and Kernel Privileges

A stealthier, more efficient Rowhammer exploit bypasses advanced defenses to escalate an unprivileged application to root and kernel privileges.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

SSO Wars - The Token Menace

Examines token-parsing flaws in single sign-on implementations, including vulnerabilities in Windows Communication Foundation and Windows Identity Foundation.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Where 2 Worlds Collide - Bringing Mimikatz et al to UNIX

Examines how tools such as Mimikatz can be adapted to UNIX systems to stage attacks against Active Directory forests.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

A Measured Response to a Grain of Rice

Examines how tiny hardware implants exploit increasingly complex systems and why detecting them is difficult.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

When Machines Can't Talk

Examines security failures in MQTT and CoAP, from protocol design and product implementations to exposed real-world deployments.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

SDL at Scale - Growing Security Champions

Learn how to build and sustain a Security Champion program within development teams, drawing on five years of program experience.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

PASTA - Portable Automotive Security Testbed with Adaptability

See how an adaptable portable testbed supports vehicle security analysis when electronic control units restrict access.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

The Undeniable Truth - How Remote Attestation Circumvents Deniability Guarantees in Secure Messaging Protocols

Explore how remote attestation can undermine deniability in secure messaging and how cryptographic protocols and trusted hardware can counter the threat.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Video Killed the Text Star - OSINT Approach

Explores adapting OSINT techniques to video analysis and person recognition as online content increasingly shifts from text to video.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Applied Self-Driving Car Security

Examines the attack surfaces of self-driving cars, from sensors and connectivity to fleet systems, and ways to secure them.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk