Black Hat Courses

Conclusions and Key Takeaways from Black Hat Asia 2018

Explore key insights and conclusions from Black Hat Asia 2018, featuring expert perspectives on cutting-edge cybersecurity trends and developments.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

New Compat Vulnerabilities in Linux Device Drivers

Explore vulnerabilities in Linux device drivers due to compat system calls, focusing on security implications for 32-bit processes running on 64-bit systems.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Writing Trusted Applications in Rust

Explore writing secure Trusted Applications using Rust's safety features. Learn about TrustZone, TEE protections, and practical examples to enhance application security.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

A Deal with the Devil - Breaking Smart Contracts

Explore tools and practices for identifying vulnerabilities in smart contracts, presented by security consultants with real-world experience in contract development.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Death Profile - Now iOS Has Been Compromised to Suspected Ransomware

Uncover the hunt for remote iOS ransomware attacks using profile installation. Learn how these "death profiles" hijack screens and crash systems, and explore techniques to defeat this emerging threat.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Back to the Epilogue - How to Evade Windows' Control Flow Guard with Less than 16 Bytes

Discover a novel attack against Windows CFG, enabling arbitrary code execution by evading integrity checks. Learn about the design vulnerability, attack construction, and potential impact.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Becoming You - A Glimpse Into Credential Abuse

Explore CDN-based techniques for detecting and mitigating credential abuse vulnerabilities, enhancing security protection during request flow without relying solely on origin servers.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Heap Layout Optimisation for Exploitation

Automatic approach to heap layout optimisation for exploitation using pseudo-random search over allocator interactions, with applications to real-world programs and vulnerability targeting.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

A Universal Controller to Take Over a Z-Wave Network

Explore Z-Wave network vulnerabilities using auto-discovery and backup/restore features, demonstrating potential security risks in smart home systems.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

How Samsung Secures Your Wallet and How to Break It

Demystifying SamsungPay's implementation and security mechanisms, with insights on bypassing analysis obstacles. Explore the intricacies of this mobile payment service's architecture and potential vulnerabilities.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Breaking Out HSTS and HPKP on Firefox, IE - Edge and - Possibly - Chrome

Explore vulnerabilities in HSTS implementation across major browsers, focusing on undocumented aspects and potential security risks in Firefox, IE/Edge, and Chrome.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Fed Up Getting Shattered and Log Jammed - A New Generation of Crypto Is Coming

Explore SHA-3 and SHAKE algorithms, their applications in cryptographic protocols, and the evolution of secure communication methods in this comprehensive technical overview.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Enraptured Minds - Strategic Gaming of Cognitive Mindhacks

Explore tools and methods for public mind manipulation, examining historical research and analyzing Twitter posts to reveal how malefactors exploit social events to promote their agendas.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Rootten Apples - Vulnerability Heaven in the iOS Sandbox

Explore critical iOS kernel vulnerabilities, privilege escalation techniques, and mitigation bypasses in this in-depth analysis of unexplored areas affecting millions of devices.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Cyber Comrades - Alliance-Building in Cyberspace

Explore cyber diplomacy, international partnerships, and the evolving landscape of cybersecurity in a globalized world. Learn strategies for alliance-building and advancing cooperation in cyberspace.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk