Black Hat Courses

Exploit Mitigation Improvements in Windows 8

Explore Windows 8's advanced security features and exploit mitigation improvements, including enhanced ASLR, heap protection, and kernel safeguards, designed to thwart modern attack techniques.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

File Disinfection Framework - Striking Back at Polymorphic Viruses

Explore an open-source framework for combating polymorphic viruses through advanced static analysis and emulation. Learn innovative techniques for file disinfection, malware analysis, and incident response.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Find Me in Your Database - An Examination of Index Security

Explore Oracle indexing architecture, new flaws, and forensic aspects. Learn to identify issues in custom applications and understand the security implications of database indexing.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Errata Hits Puberty - 13 Years of Chagrin

Exploring the attrition.org Errata project's 13-year journey as an IT and security industry watchdog, including insights into its history, process, impact, and future direction.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

eEye BootRoot

Explore advanced rootkit techniques and boot-level system manipulation with eEye BootRoot, presented by security experts Derek Soeder and Ryan Permeh.

• YouTube
• 2 hours 2 minutes
• On-Demand
• Conference Talk

Attacking Web Services - Next Generation of Vulnerable Enterprise Apps

Explore vulnerabilities in enterprise web services and learn advanced techniques for identifying and exploiting security flaws in next-generation applications.

• YouTube
• 1 hour 18 minutes
• On-Demand
• Conference Talk

Economics, Physics, Psychology & Relation to Technical Aspects of Counter Intelligence

Explore economic, physical, and psychological aspects of counter-intelligence, examining authentication protocols, learned helplessness, and interactive risk in cybersecurity.

• YouTube
• 1 hour 13 minutes
• On-Demand
• Conference Talk

SQL Injection Detection - Joint Force Database Auditing & Anomaly Intrusion Detection

Explore advanced SQL injection detection techniques, combining database auditing and anomaly intrusion detection for enhanced cybersecurity measures.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

The National ID Debate

Explore the complex issues surrounding national identification systems with expert panelists discussing privacy, security, and societal implications.

• YouTube
• 1 hour 19 minutes
• On-Demand
• Conference Talk

The Art of File Format Fuzzing

Explore advanced techniques for file format fuzzing, uncovering vulnerabilities in software applications through systematic input manipulation and analysis.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

The Non-Cryptographic Ways of Losing Information

Explore non-cryptographic methods of information loss, examining vulnerabilities and risks in data protection beyond encryption techniques.

• YouTube
• 1 hour 14 minutes
• On-Demand
• Conference Talk

The Jericho Challenge - Finalist Architecture Presentations and Awards

Finalist presentations and awards for innovative network security architectures, challenging traditional perimeter-based approaches at Black Hat USA 2005.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk

Beyond EIP

Explore advanced exploitation techniques beyond EIP, including OP sled, return addresses, and encoders. Learn about payloads and stagers for enhanced post-exploitation capabilities.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Injection Flaws - Stop Validating Your Input

Explore injection flaws and learn why input validation alone is insufficient for security. Discover effective strategies to protect against these vulnerabilities in web applications.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Owning the C-suite - Corporate Warfare as a Social Engineering Problem

Explore social engineering tactics in corporate espionage, focusing on vulnerabilities in executive-level security and strategies for protecting high-value targets in organizations.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk