Black Hat Courses

Windows Heap-backed Pool - The Good, the Bad, and the Encoded

Explore Windows kernel pool's evolution, new design complexities, and potential vulnerabilities. Learn about structure changes, exploitation techniques, and analysis tools for kernel pool security.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Typhoon Mangkhut - One-click Remote Universal Root Formed with Two Vulnerabilities

Exploit chain for remote Android root using Chrome and Binder vulnerabilities. Demonstrates bypassing security mitigations to achieve one-click root access on modern Pixel devices.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Smashing the ML Stack for Fun and Lawsuits

Explore legal risks and ethical considerations of testing commercial ML systems' security, with insights on potential lawsuits and regulatory implications for researchers.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Put in One Bug and Pop Out More - An Effective Way of Bug Hunting in Chrome

Discover effective bug hunting techniques in Chrome, leveraging historical vulnerabilities to uncover new ones. Learn to identify shared code patterns and exploit codebase complexity for enhanced security testing.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Sleight of ARM - Demystifying Intel Houdini

Explore Intel's Houdini binary translator for running ARM on x86, its architecture, security implications, and comparison with Apple's Rosetta 2, focusing on Android emulation and Chromebooks.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The Case for a National Cybersecurity Safety Board

Explores the need for a National Cybersecurity Safety Board to investigate and prevent cyber attacks, drawing parallels with the NTSB and addressing critical infrastructure vulnerabilities.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

President's Cup Cyber Competition - Finding the Best Cyber Talent in the US Government

Explore the behind-the-scenes story of the President's Cup Cybersecurity Competition, designed to identify and challenge top US government cyber talent.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Bringing the Power of Symbolic Execution to the Fight Against Malicious Excel 4 Macros

Explore Symbexcel, a tool using symbolic execution to analyze and detect malicious Excel 4.0 macros, enhancing cybersecurity against this common attack vector.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

The Dark Age of Memory Corruption Mitigations in the Spectre Era

Explores how speculative execution attacks can bypass memory corruption defenses, challenging established security measures and revealing vulnerabilities in modern computer systems.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Your Software IS - NOT Vulnerable - CSAF, VEX, and the Future of Advisories

Explore the future of software security advisories, focusing on CSAF and VEX, and learn how to manage the increasing volume of vulnerability information effectively.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain

Explore a JSON deserialization vulnerability in Fastjson, its exploitation for remote code execution, and implications for blockchain security.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Disappeared Coins - Steal Hashrate in Stratum Secretly

Unveils two novel man-in-the-middle attack schemes on Stratum, the main communication protocol for cryptocurrency mining pools, potentially compromising miners' computing power.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

The Cost of Complexity - Different Vulnerabilities While Implementing the Same RFC

Exploring security vulnerabilities in DNS implementations due to complexity and ambiguity in RFC 1035, focusing on message compression and its impact on TCP/IP stacks.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Hunting Vulnerabilities of gRPC Protocol Armed Mobile - IoT Applications

Explore security vulnerabilities in gRPC-powered mobile and IoT apps. Learn about common pitfalls, attack vectors, and strategies to enhance protection in this high-performance protocol.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Racing the Dark - A New TOCTTOU Story From Apple's Core

Unveils macOS kernel vulnerabilities, highlighting memory mapping issues and race conditions that bypass security updates. Emphasizes the need to reevaluate macOS/iOS memory mapping mechanisms.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk