Black Hat Courses

One Glitch to Rule Them All - Fault Injection Attacks Against the AMD Secure Processor

A hardware fault-injection attack bypasses AMD Secure Processor signature checks to execute custom payloads and compromise security features including SEV.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Lost in the Loader - The Many Faces of the Windows PE File Format

A research briefing on modeling Windows PE loaders to expose parser differentials, generate corner-case files, and uncover malware-relevant discrepancies.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Hand in Your Pocket Without You Noticing - Current State of Mobile Wallet Security

A detective-story investigation reveals how flaws in Apple Pay, Google Pay, and Samsung Pay can enable contactless purchases from locked or stolen phones.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

The Art of Exploiting UAF by Ret2bpf in Android Kernel

Analyzes exploiting an Android kernel use-after-free with heap manipulation, crafted control flow, return-to-BPF, and defenses against rooting.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Achieving Linux Kernel Code Execution Through a Malicious USB Device

Examine how a malicious USB device exploits Linux kernel CVE-2016-2384 to achieve code execution, including heap manipulation, payload delivery, and mitigation challenges.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Owfuzz - WiFi Nightmare

Explore OWFuzz-based Wi-Fi protocol fuzzing to uncover denial-of-service and channel-based man-in-the-middle vulnerabilities in wireless devices.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs

A case study of Team TNT’s cloud and Kubernetes compromises, from stolen AWS credentials and persistence to practical defenses.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

APTs Go Teleworking - The Rise of VPN Exploits

Case-based analysis of Pulse Secure VPN intrusions, attacker persistence, credential harvesting, anti-forensics, and incident response.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Practical HTTP Header Smuggling - Sneaking Past Reverse Proxies to Attack AWS and Beyond

A practical look at detecting and exploiting HTTP header smuggling across reverse proxies, including AWS API Gateway attacks, cache poisoning, and defenses.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Certified Pre-Owned - Abusing Active Directory Certificate Services

Explores how attackers abuse Active Directory Certificate Services for credential theft, domain escalation, and persistent access.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Bypassing Windows Hello for Business and Pleasure

Explore how a crafted USB device can impersonate a Windows Hello camera and bypass facial-recognition authentication.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms

Examine how DNS-as-a-Service resolver behavior and Dynamic DNS edge cases expose corporate networks to large-scale information leakage.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Bridging Security Infrastructure Between the Data Center and AWS Lambda

Learn how Square connected AWS Lambda with its data-center service mesh using SPIFFE workload identity and synchronized application secrets.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Breaking Secure Bootloaders

Analyze Qualcomm Android and NXP bootloaders to uncover signature-verification weaknesses, bypass secure-boot checks, and deploy unsigned firmware.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Cloudy with a Chance of APT - Novel Microsoft 365 Attacks in the Wild

Examines how APT groups evade Microsoft 365 defenses, abuse applications and permissions, and maintain persistent access to organizational data.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk