Black Hat Courses

Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet

Explore remote code execution vulnerabilities in physical security systems, learning to exploit and disarm alarms through reverse engineering and network protocol analysis.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

New Attack Surface in Safari - Using Just One Web Audio Vulnerability to Rule Safari

Explores a novel attack surface in Safari, focusing on vulnerabilities in system libraries like audio. Demonstrates how a single Web Audio vulnerability can be exploited to compromise Safari's security.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

The Tangled Webview - Javascriptinterface Once More

Unveils new Android WebView vulnerabilities related to JavascriptInterface, bypassing all verifications. Presents a novel attack model and discusses security implications for mobile app developers.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

A Walk Through Historical Correlations Between Vulnerabilities and Stock Prices

Explore the impact of security vulnerabilities and data breaches on stock prices across industries, analyzing recovery patterns and sector-specific effects through historical data analysis.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Analyzing and Fuzzing for Qualcomm Hexagon Processor

Explore techniques for analyzing and fuzzing Qualcomm Hexagon processors, overcoming challenges in firmware analysis, emulation, and hardware-dependent targets for enhanced security research.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

In-Field Emulation and Fuzzing of PLCs to Uncover the Next Zero-Day Threat in Industrial Control Systems

Explore innovative techniques for uncovering vulnerabilities in Industrial Control Systems through in-field emulation and fuzzing of PLCs, focusing on proactive security measures beyond network-level exploits.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Manufacturing Hardware Implants from Idea to Mass Production - A Hacker's Journey

Explore the journey of creating and mass-producing hacking devices, from initial concept to final product. Learn about R&D, quality assurance, and manufacturing challenges in hardware development.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

HTML5 Top 10 Threats - Stealth Attacks & Silent Exploits

Explores top 10 HTML5 security threats, including CORS attacks, clickjacking, XSS, web storage vulnerabilities, and more. Demonstrates real-life examples and discusses defense strategies against emerging attack vectors.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

The Info Leak Era on Software Exploitation

Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Digging Deep Into the Flash Sandboxes

Explore Flash Player sandbox implementations, their architectures, mechanisms, and security limitations. Learn about potential vulnerabilities and sandbox escape techniques in this in-depth analysis.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Here Be Backdoors - A Journey into the Secrets of Industrial Firmware

Exploring vulnerabilities in industrial control systems through firmware analysis, revealing backdoors and security flaws in critical infrastructure devices like PLCs, smart meters, and SCADA systems.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

When Security Gets in the Way - Pen Testing Apps That Use Certificate Pinning

Explore tools and techniques for defeating certificate pinning in mobile apps during black-box testing, enabling interception of SSL traffic on both iOS and Android platforms.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

How Many Bricks Does It Take to Crack a Microcell

Journey through reverse engineering a 3G microcell, covering hardware hacking, kernel reversing, firmware manipulation, software reversing, networking, memory forensics, and social engineering. Insights into successes, failures, and lessons learned.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Hacking the Corporate Mind - Using Social Engineering to Improve Organizational Security Acceptance

Discover social engineering techniques to improve organizational security acceptance, bridging the gap between users and InfoSec teams for better awareness and policy adherence.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

PinPadPwn

Explore vulnerabilities in payment terminals, including memory corruption issues and potential attack vectors. Learn about code execution risks and discuss profitable payloads for attackers.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk