Black Hat Courses

Bounty Operations - Best Practices and Common Pitfalls to Avoid in the First 6-12 Months

Insights from experienced bug bounty managers on program operations, triage strategies, and common vulnerabilities. Learn best practices and avoid pitfalls for successful bounty programs.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

The Future of ATO

Exploring the evolving landscape of Account Takeover (ATO) attacks, focusing on emerging threats, sophisticated techniques, and strategies to protect user accounts in the digital age.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Zombie Ant Farming - Practical Tips for Playing Hide and Seek with Linux EDRs

Explore techniques to evade Linux EDRs, including using approved executables as decoys and leveraging dynamic ELF loader primitives for stealthy post-exploitation capabilities.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Debug for Bug - Crack and Hack Apple Core by Itself

Explore Apple kernel vulnerabilities through fuzzing, including double free and out-of-bounds issues. Learn about debugging and fuzzing techniques for uncovering security flaws in Apple's core systems.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Operational Templates for State-Level Attack and Collective Defense of Countries

Explore templates for nation-level cyber attacks and defense strategies, examining various time horizons, attribution levels, and collective approaches to protect countries in cyberspace.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Infighting Among Russian Security Services in the Cyber Sphere

Explore the complex dynamics of Russian security agencies in cyberspace, examining conflicts, international campaigns, and their implications for global cybersecurity.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Exploring the New World - Remote Exploitation of SQLite and Curl

Discover new methods for finding vulnerabilities in SQLite and Curl through fuzzing and manual auditing, including insights on "Magellan" and "Dias" vulnerabilities.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Critical Zero Days Remotely Compromise the Most Popular Real-Time OS

Explore critical vulnerabilities in VxWorks, a popular real-time OS, and their potential for remote network breaches and device exploitation. Includes live demonstrations on various devices, including medical equipment.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

DevSecOps - What, Why, and How

Explore the transformation of DevOps to DevSecOps, its benefits, and implementation using open-source tools across various deployment platforms, with practical demonstrations.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Firmware Cartography - Charting the Course for Modern Server Compromise

Explore undocumented server vulnerabilities through firmware analysis. Learn methodologies, tools, and techniques for uncovering security flaws in hardware-software interactions and exploiting weak controls.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Making Big Things Better - The Dead Cow Way

Explore the evolution and impact of hacker group Cult of the Dead Cow with key members, discussing their journey from teenage misfits to industry leaders and their contributions to cybersecurity and activism.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Mobile Interconnect Threats - How Next-Gen Products May Be Already Outdated

Explore vulnerabilities in mobile networks, focusing on SS7 security flaws, potential attacks, and risks to subscriber privacy and communication integrity.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Finding Our Path - How We're Trying to Improve Active Directory Security

Explore strategies to enhance Active Directory security, focusing on enumeration, risk assessment, and mitigation techniques for networks of all sizes.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Securing Apps in the Open-By-Default Cloud

Automated solution enforcing auth controls for all services, minimizing operational overhead and maintaining development team autonomy in open-by-default cloud environments.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Behind the Scenes of Intel Security and Manageability Engine

Deep dive into Intel's security architecture, exploring firmware environments, feedback fuzzing, and queue management techniques applicable to various systems and fuzzers.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk