Black Hat Courses

Legal Aspects of Full Spectrum Computer Network - Active Defense

Explores legal implications of active cyber defense, covering technology, information control, and controversial practices. Emphasizes importance of collaboration between security professionals and legal counsel.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

A Practical Attack Against MDM Solutions

Unveiling spyphone attacks: A proof-of-concept technique bypassing mobile malware detection and MDM features, demonstrating vulnerabilities in mobile security and surveillance risks.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

What Security Researchers Need to Know About Anti-Hacking Law

Explore legal risks for security researchers under the Computer Fraud and Abuse Act, including key cases, implications, and strategies to avoid legal trouble in cybersecurity work.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Detecting Bugs Using Decompilation and Data Flow Analysis

Explore Bugwise, a free online service for detecting software bugs through decompilation and data flow analysis, showcasing its success in finding vulnerabilities in Debian Linux.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Lessons from Surviving a 300Gbps Denial of Service Attack

Insights from a record-breaking DDoS attack: strategies, vulnerabilities, and defensive measures for safeguarding networks against evolving cyber threats.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Is That a Government in Your Network or Are You Just Happy to See Me?

Explore techniques for identifying and defending against long-term network intrusions by foreign intelligence agencies, with insights on open-source tools for detecting impersonation attacks.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Hunting the Shadows - In Depth Analysis of Escalated APT Attacks

In-depth analysis of APT attacks targeting Taiwan, showcasing automated detection systems, forensic techniques, and insights into attacker operations. Includes release of collaborative APT classification platform.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

New Optimization and Obfuscation Techniques

Advanced SQL injection techniques for bypassing firewalls and intrusion detection systems, including optimization methods and the Leapfrog framework for testing security measures.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

The SCADA That Didn't Cry Wolf - Who's Really Attacking Your ICS Devices

Profiling and analyzing real-world attacks on industrial control systems, revealing surprising findings about attacker tactics, origins, and motivations in ICS security.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Smashing the Font Scaler Engine in Windows Kernel

Exploring vulnerabilities in Windows Font Scaler Engine, including its structure, smart fuzzing methods, and potential attack vectors. Demonstrates new TrueType font vulnerabilities on Windows 8 and 7.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Untwining Twine

Explore the analysis and exploitation of Twine, a consumer IoT device, through reverse engineering, traffic capture, and firmware analysis. Learn techniques for understanding embedded systems.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

CrowdSource - Crowd Trained Machine Learning Model for Malware Capability Detection

Innovative machine learning tool for automated malware capability detection, trained on web technical documents. Provides probabilistic and traceable output for rapid reverse engineering of active malware variants.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Teridian SoC Exploitation - Harvard Architecture Smart Grid Systems

Exploitation techniques for Teridian 8051-based SoCs in smart grid systems, covering architecture, security barriers, and methods to gain code execution and firmware access.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Denying Service to DDOS Protection Services

Explore vulnerabilities in cloud-based DDoS protection services and learn techniques to bypass and unmask protected websites using the "No Cloud Allowed" tool.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Universal DDoS Mitigation Bypass

Explores weaknesses in DDoS mitigation techniques, demonstrating bypass methods for various protection layers. Introduces a PoC tool for near-perfect mitigation evasion, highlighting vulnerabilities in current defense strategies.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk