Black Hat Courses

Web Tracking For You

Explore advanced web tracking techniques for identifying and monitoring potential security threats, covering active and passive fingerprinting, user unmasking, and cross-platform implementation.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

iOS Kernel Heap Armageddon Revisited

Explora técnicas avanzadas de explotación del heap del kernel de iOS, incluyendo ataques a metadatos, objetos C++ y control del heap, con énfasis en nuevos métodos más allá de la lista libre.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Still Passing the Hash 15 Years Later - Using Keys to the Kingdom to Access Data

Explore Windows authentication vulnerabilities and learn how password hashes can be exploited to access sensitive data across various enterprise services, even 15 years after discovery.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

SQL Injection to MIPS Overflows - Rooting SOHO Routers

Explore SQL injection techniques to exploit buffer overflows and gain root access to Netgear routers, including file extraction and live demonstration of vulnerabilities in SOHO devices.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Ghost is in the Air - Traffic - Security Aspects of ADS-B and "Flying" Technology

Explore security vulnerabilities in ADS-B technology and potential threats to air traffic control systems, including practical demonstrations of data injection and visualization techniques.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Legal Aspects of Cyberspace Operations

Explore legal frameworks for cyberspace operations, including network security, defense, exploitation, and attack. Gain insights into recent incidents and their legal classifications.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Easy Local Windows Kernel Exploitation

Discover reliable techniques for exploiting common local Windows kernel vulnerabilities across multiple versions, including previously challenging exploits.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Torturing OpenSSL

Explore hardware vulnerabilities in secure systems through a side-channel attack on RSA signatures, demonstrating how induced faults can compromise software-secure systems and extract private keys.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Sexy Defense - Maximizing the Home-field Advantage

Proactive defense strategies: intelligence gathering, modeling, and expanding defender roles. Maximize existing resources for effective security posture against penetration testers and red teams.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

PRNG Pwning Random Number Generators in PHP Applications

Techniques for exploiting randomness vulnerabilities in PHP applications, focusing on password reset token predictability and demonstrating account takeover through PRNG prediction.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

How Analysis of EC Consumption of Embedded Systems Could Lead to Code Reversing

Practical approach to reverse engineering embedded systems through power analysis. Explores experimental protocol, tools, and techniques for extracting code without physical access to internal components.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Exploiting the Jemalloc Memory Allocator - Owning Firefox's Heap

Explore jemalloc memory allocator's architecture, attack vectors, and novel exploitation techniques, focusing on Mozilla Firefox's heap and its security implications.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Targeted Intrusion Remediation - Lessons From The Front Lines

Explore strategies for combating persistent cyber threats, focusing on inhibiting attacker activities, enhancing detection capabilities, and improving rapid response techniques for effective intrusion remediation.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Owning Bad Guys and Mafia with Javascript Botnets

Explore mitm attacks on anonymous services and learn to create JavaScript botnets for analyzing connections, uncovering activities of malicious actors behind these services.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Don't Stand So Close To Me - An Analysis of the NFC Attack Surface

Explora la seguridad de NFC en dispositivos móviles, analizando protocolos, vulnerabilidades y posibles ataques. Incluye demostraciones prácticas de explotación y recomendaciones para mejorar la protección.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk