Black Hat Courses

Hide Android Applications in Images

1 rating

Discover a technique to conceal malicious payloads in Android packages, manipulating encrypted data to appear as genuine images while evading detection and reverse engineering attempts.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

iOS Application Security Assessment and Automation - Introducing SIRA

1 rating

Automated iOS app security assessment tool SIRA demonstrated, revealing common flaws in AppStore products. Explores risks, testing methods, and future improvements for mobile app security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Introduction to Corporate Information Security Law

1 rating

Explore corporate information security law fundamentals, legal frameworks, and compliance strategies for protecting sensitive data and mitigating cyber risks in business environments.

• YouTube
• 1 hour 26 minutes
• Self-Paced
• Conference Talk

Supply Chain Infections and the Future of Contactless Deliveries

1 rating

Explore supply chain risks, their consequences, and industry mitigation strategies in light of recent challenges. Gain insights into software integrity and future security measures.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Securing Your Big Data Environment

1 rating

Explore strategies for securing big data environments, focusing on Hadoop. Learn about control frameworks, data protection techniques, and effective risk management for sensitive information.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Owning a Building - Exploiting Access Control and Facility Management Systems

1 rating

Explore vulnerabilities in building access control and facility management systems, uncovering potential security risks and exploitation techniques.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk

Dynamic Binary Instrumentation Techniques to Address Native Code Obfuscation

1 rating

Explore dynamic binary instrumentation techniques for tackling obfuscated Android app code, aiding reverse engineers in overcoming anti-analysis protections.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Ret2page - The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache

Explore a new exploitation technique for Use-After-Free vulnerabilities, focusing on SLUB and BUDDY allocators to improve efficiency and success rates in physical page reuse and Android rooting.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Android Universal Root - Exploiting Mobile GPU - Command Queue Drivers

Explore GPU hacking techniques and vulnerabilities in Android device drivers, focusing on rooting methods and security implications for mobile systems.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

A Journey Into Fuzzing WebAssembly Virtual Machines

Explore WebAssembly VM architecture, attack surfaces, and fuzzing strategies. Learn about bug discovery across multiple projects using various fuzzing techniques and frameworks.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Trace Me if You Can - Bypassing Linux Syscall Tracing

Novel vulnerabilities and exploitation techniques to bypass Linux syscall tracing, even with security measures like seccomp, SELinux, and AppArmor in place. Demonstrates how user-mode programs can evade detection.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Monitoring Surveillance Vendors - A Deep Dive into In-the-Wild Android Full Chains in 2021

Explore in-the-wild Android exploits discovered by Google's TAG and Android Security teams, including deep dives into CVE-2021-0920 and novel kernel exploitation techniques for bypassing hardware mitigations.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Unlimited Results - Breaking Firmware Encryption of ESP32-V3

Unveiling vulnerabilities in ESP32-V3 microcontrollers through hardware security evaluation, focusing on extracting firmware encryption keys to decrypt flash content containing potential secret data.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Backdooring and Hijacking Azure AD Accounts by Abusing External Identities

Explore Azure AD external identities, their vulnerabilities, and potential exploitation methods for backdooring and hijacking accounts in this informative cybersecurity presentation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Automatic Protocol Reverse Engineering

Discover techniques for automatically extracting network protocol specifications from binary code, useful for security analysis, bug finding, and understanding botnet communications.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk