Black Hat Courses

Stealth Mango and the Prevalence of Mobile Surveillanceware

Unveiling nation-state mobile surveillance tools Stealth Mango and Tangelo, exploring their capabilities and impact on government and military targets across multiple countries.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Detecting Malicious Cloud Account Behavior - A Look at the New Native Platform Capabilities

Explore new native cloud platform capabilities for detecting suspicious account activity, including attack lifecycle, detection methods, and practical examples from major providers.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Fire & Ice - Making and Breaking macOS Firewalls

Explore macOS firewall creation and vulnerabilities, covering kernel-level socket filtering, user-mode communication, secure installation, and self-defense mechanisms. Learn about firewall bypasses and potential weaknesses.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Don't @ Me - Hunting Twitter Bots at Scale

Explore the Twitter bot economy and learn a three-step methodology to track down bots: dataset building, attribute identification, and classifier development for accurate large-scale detection.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

A Brief History of Mitigation - The Path to EL1 in iOS 11

Explore the async_wake exploit for iOS 11.1.2, examining each step and the mitigations overcome. Gain insights into iOS security vulnerabilities and exploitation techniques.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Attacks on the Curl-P Hash Function Leading to Signature Forgeries in the IOTA Signature Scheme

Análisis de vulnerabilidades en la función hash Curl-P de IOTA, revelando debilidades criptográficas que permiten falsificar firmas digitales en esta criptomoneda de alto perfil para el Internet de las Cosas.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Enhancing Cybersecurity Through Differentiated Access to Domain Name Registration Data

Explore new technology bridging privacy and access gaps in domain name registration data, enhancing cybersecurity through differentiated access and automated systems.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

From Bot to Robot - How Abilities and Law Change with Physicality

Explore the evolving landscape of bots and robots, their impact on society, and the legal implications as they transition from digital to physical realms.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

The Unbearable Lightness of BMC's

Explore vulnerabilities in data center Baseboard Management Controllers (BMCs), uncovering potential security risks and their implications for critical infrastructure.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths

Explore Ethereum smart contract vulnerabilities, reverse engineering techniques, and new tools for analyzing blockchain attacks through real-world examples and practical demonstrations.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

There Will Be Glitches - Extracting and Analyzing Automotive Firmware Efficiently

Explore automotive firmware extraction and analysis techniques, focusing on fault injection and emulation for uncovering vulnerabilities in vehicle security systems.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Compression Oracle Attacks on VPN Networks

Explore compression oracle attacks on VPN networks, including browser requests and ESP compression. Learn detection methods, setup requirements, and potential future threats.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

No Royal Road - Notes on Dangerous Game

Explores attribution fatigue in cybersecurity, examining nation-state hacking, stolen toolchains, and the evolution of cyber threats beyond espionage into active operations.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Remotely Attacking System Firmware

Explore remote attack vectors targeting system firmware, including networking and updates. Learn about exploiting UEFI vulnerabilities for installing persistent implants at scale.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Holding on for Tonight - Addiction in InfoSec

Explore the connection between stress, addiction, and relapse in InfoSec, with personal insights on alcohol use disorder and tips for fostering inclusive, supportive work environments.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk