Black Hat Courses

Understanding and Exploiting Implanted Medical Devices

An 18-month case study reveals how remote vulnerabilities in implanted devices can disrupt therapy or trigger shocks.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Unpacking the Packed Unpacker - Reverse Engineering an Android Anti-Analysis Native Library

Learn how reverse engineering an Android anti-analysis native library can expose techniques malware authors use to hide their code.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

TLBleed - When Protecting Your CPU Caches is Not Enough

A side-channel attack extracts information from translation lookaside buffers without relying on CPU data or instruction caches.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Windows Offender - Reverse Engineering Windows Defender's Antivirus Emulator

A reverse engineering look inside Windows Defender’s emulator for analyzing potentially malicious Windows PE binaries.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Another Flip in the Row

A look at how Rowhammer bit flips can turn a DRAM reliability issue into system compromises, and how attackers and defenders respond.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Playback - A TLS 1.3 Story

Examines TLS 1.3’s 0-RTT feature through real-world replay attack demonstrations and discusses ways to prevent them.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems

Investigates attacks on mobile point-of-sale systems, including Bluetooth command access and payment manipulation, and considers risks tied to low-cost card acceptance and mag-stripe.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

An Attacker Looks at Docker - Approaching Multi-Container Applications

See multi-container Docker applications through an attacker’s lens, exploring how containerization changes offensive operations.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

DeepLocker - Concealing Targeted Attacks with AI Locksmithing

DeepLocker hides malware behind a neural-network trigger, activating an attack only when it recognizes a chosen target attribute.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Lowering the Bar - Deep Learning for Side Channel Analysis

See how convolutional neural networks automate power-signal analysis to recover cryptographic keys despite misalignment and masking.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It

Examine how attackers exploit administrative workflows and learn an Active Directory model for isolating and protecting privileged credentials.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Stop That Release, There's a Vulnerability!

See how a product security team turns vulnerability tracking and risk-based release reviews into a practical security gate.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Pestilential Protocol - How Unsecure HL7 Messages Threaten Patient Lives

Examines how insecure HL7 messages can threaten patients amid vulnerable healthcare technology.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

InfoSec Philosophies for the Corrupt Economy

Explores how corruption can undermine information security efforts in developed and developing countries, using anecdotes from criminals and victims.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Every ROSE Has Its Thorn - The Dark Art of Remote Online Social Engineering

A case-based account of how remote online social engineering campaigns build false identities, establish trust, prime targets, and get detected.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk