Black Hat Courses

When Good Turns Evil - Using Intel SGX to Stealthily Steal Bitcoins

Explore how Intel SGX can be exploited to implement stealthy malware, extract secret RSA keys, and steal Bitcoins through cache attacks and other vulnerabilities in trusted execution environments.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

A New Method to Bypass 64-bit Linux ASLR

Explore a novel ASLR bypass technique for 64-bit Linux systems using "return-to-csu", applicable to any application due to its use of silently attached code.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Breaking the Attack Graph - How to Leverage Graphs to Strengthen Security in a Domain Environment

Explore how defenders can leverage graph-based thinking to strengthen security in domain environments, adapting to sophisticated attackers and enhancing prevention, detection, and investigation strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Exfiltrating Reconnaissance Data from Air-Gapped ICS - SCADA Networks

Explore techniques for exfiltrating data from isolated industrial networks, including PLC-based methods, frequency manipulation, and passive monitoring. Learn about attack vectors and detection strategies.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

A Retrospective Case Study of VMware Guest-to-Host Escape Vulnerabilities

Análisis detallado de vulnerabilidades de escape de máquinas virtuales VMware, explorando superficies de ataque, mecanismos RPC y casos de estudio de parches de seguridad recientes.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

A Process is No One - Hunting for Token Manipulation

Learn to generate hunt hypotheses for effective threat hunting, focusing on token manipulation techniques and targeted data collection for improved cybersecurity analysis.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Inside Android's SafetyNet Attestation

Explore Android's SafetyNet Attestation, its role in ecosystem security, and potential vulnerabilities. Learn about attack patterns, device integrity detection, and implementation challenges.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Attacks Against GSMA's M2M Remote Provisioning

Explore vulnerabilities in GSMA's eUICC remote provisioning, revealing potential attacks that could disrupt mobile network operators' service delivery. Learn about SIM evolution and security implications.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

CALDERA - Automating Adversary Emulation

Automate adversary emulation for network security using CALDERA. Replicate realistic post-compromise techniques, leveraging benign system functionality to enhance defensive strategies.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

DIFUZE - Android Kernel Driver Fuzzing

Explore Android kernel driver fuzzing with DIFUZE, a tool for identifying vulnerabilities in third-party driver code. Learn techniques to improve Android security infrastructure and discover potential weaknesses.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

CLKscrew - Exposing the Perils of Security-Oblivious Energy Management

Explore CLKSCREW attack: software-based fault attacks exploiting energy management vulnerabilities, enabling security breaches without physical access to devices or specialized equipment.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Breaking Bad - Stealing Patient Data Through Medical Devices

Explore risks of connected healthcare devices, including attack surfaces, data vulnerabilities, and real-world case studies of medical IoT security breaches and their implications.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Intel ME - Flash File System Explained

Detailed explanation of Intel Management Engine's flash file system, covering storage methods, supported file systems, and security features in ME 11.x.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Breaking XSS Mitigations Via Script Gadgets

Explore a novel web hacking technique that bypasses XSS mitigations using script gadgets. Learn about HTML sanitizers, CSP, and practical demonstrations of this powerful attack method.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Bot vs. Bot for Evading Machine Learning Malware Detection

Explore automated evasion techniques against machine learning-based malware detection, including AI-driven approaches and strategies for model hardening.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk