Black Hat Courses

Living off Microsoft Copilot - Exploiting AI for Red Team Operations

Explore how Microsoft Copilot can be exploited for covert data theft, exfiltration, and AI-based social engineering. Learn about LOLCopilot tool and recommended protective measures against Copilot abuse.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

JTAG Fault Analysis: Journey to Unlocking Automotive Grade ICs

Delve into advanced JTAG security vulnerabilities in automotive chips, focusing on SPC5 protocol analysis, authentication bypass techniques, and fault injection methods for vehicle system protection.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Overcoming State - Finding Baseband Vulnerabilities by Fuzzing Layer-2

Dive into baseband vulnerability research through Layer-2 fuzzing techniques, exploring critical security flaws in modern smartphone cellular stacks and their real-world implications.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Pervasive Account Takeovers in Integration Platforms for Workflow Automation, Virtual Voice Assistants, IoT, and LLM Services

Uncover critical security vulnerabilities in integration platforms and learn how OAuth-based account linking mechanisms can be exploited, leading to account takeovers and privacy breaches across major tech services.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Deoxidizing the Rust Malware Ecosystem - A Practical Analysis Methodology

Dive into advanced Rust malware analysis techniques and learn practical methodologies for reverse-engineering complex threats like RustDown and RustBucket, with tools and approaches to tackle emerging security challenges.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

PyLingual - A Python Decompilation Framework for Evolving Python Versions

Discover how PyLingual combines NLP and programming theory to create an adaptive Python decompiler, supporting versions 3.6-3.12 and enabling efficient malware analysis and reverse engineering.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Leveraging Large Language Models for Security Response Workflows

Discover how Microsoft leverages LLMs to streamline vulnerability response workflows, predict severity, analyze crash dumps, and enhance security response efficiency through practical fine-tuning applications.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

OVPNX - Four Zero-Day Vulnerabilities Leading to Remote Code Execution in OpenVPN Endpoints

Dive into critical zero-day vulnerabilities affecting OpenVPN, exploring exploit chains from remote code execution to kernel code execution, with detailed analysis and mitigation strategies for global security impact.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Understanding and Reducing Supply Chain and Software Vulnerability Risks

Discover strategies for identifying and mitigating supply chain risks in complex software ecosystems, focusing on backdoors, vulnerabilities, and prevention of operational disruptions.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

How Hackers Changed the Media and the Media Changed Hackers

Explore the complex relationship between cyber extortion gangs and journalists, examining ethical dilemmas, PR strategies, and the evolving dynamics of media coverage in cybersecurity incidents.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

From Doxing to Doorstep: Exposing Privacy Intrusion Techniques Used by Hackers for Extortion

Explore how doxing has evolved from exposing hackers' identities to a tool for real-world extortion, examining privacy intrusion techniques and the concerning trend of digital conflicts manifesting as physical violence.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Attacking Samsung Galaxy A* Boot Chain and Beyond

Dive into the exploitation of Samsung Galaxy A* boot chain vulnerabilities, focusing on the Little Kernel bootloader and bypassing secure boot mechanisms.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Hardening HSMs for Banking-Grade Cryptocurrency Wallets - Security Techniques and Best Practices

Discover advanced techniques for enhancing HSM security in cryptocurrency custody solutions, from attack surface reduction to state management and custom policies for protecting high-value digital assets.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

From Weapon to Target - The Security Vulnerabilities of Quantum Computing Systems

Explore critical security vulnerabilities in quantum computing systems, from software stack weaknesses to hardware exploits, while learning how to protect quantum platforms against emerging cyber threats.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Web Cache Exploitation: Advanced Techniques for Static Path Deception and Cache Key Confusion

Discover powerful web cache exploitation techniques, including Static Path Deception and Cache Key Confusion, to identify vulnerabilities in major platforms and learn advanced security testing methodologies.

• YouTube
• 36 minutes
• Self-Paced
• Free Video