Black Hat Courses

LadderLeak - Breaking ECDSA with Less than One Bit of Nonce Leakage

Analyze how less than one bit of ECDSA nonce leakage can be measured through side channels and exploited to recover a private key.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

POSWorld - Should You Be Afraid of Hands-On Payment Devices

A technical investigation of vulnerabilities in Verifone and Ingenico payment terminals, from undocumented shells and buffer overflows to cloned devices and fraudulent transactions.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Hacking Government Cybersecurity

Explores how governments can manage cyber risk through security culture, collaboration, and partnerships among public agencies, industry, researchers, and hacker communities.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

How Embedded TCP-IP Stacks Breed Critical Vulnerabilities

A case study of embedded TCP/IP stack flaws, from IPv6 and DNS parsing bugs to heap overflows, exploitation, and practical mitigation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Effective Vulnerability Discovery with Machine Learning

Explore how machine learning can uncover vulnerabilities in third-party and transitive software dependencies at scale.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Securing the Next Version of HTTP - How QUIC and HTTP-3 Compare to HTTP-2

Explore QUIC and HTTP/3 security, including encrypted transport handshakes, packet protection, address validation, connection migration, and zero-RTT risks.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Raiden Glitching Framework

Explore Raiden, an open-source FPGA glitching framework for precisely timed power and clock faults that can bypass embedded-device security checks.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

From Zero to Sixty - The Story of North Korea's Rapid Ascent to Becoming a Global Cyber Superpower

Analyzes North Korea’s evolution from military cyber targeting to financially motivated operations and cyber-enabled power projection.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Hey Google, Activate Spyware! - When Google Assistant Uses a Vulnerability as a Feature

A hacker’s step-by-step exploitation of an Android camera vulnerability to create stealthy, persistent spyware.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

3D Red Pill - A Guest-to-Host Escape on QEMU/KVM Virtio Device

A technical walkthrough of fuzzing QEMU’s virtio-gpu device and turning a heap overflow into a guest-to-host escape.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices

A technical briefing on Kr00k, a Wi-Fi chipset vulnerability that exposed WPA2 traffic from billions of devices through all-zero key encryption.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

ZombieLoad - Leaking Data on Intel CPUs

A demonstration of ZombieLoad, showing how transient execution in Intel CPUs can leak data and recover audio from memory.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Wi-Fi Brokering

Wi-Fi brokering demonstrates relaying PEAP challenge-response authentication through rogue access points and examines cryptographic binding as a defense.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Complexity Killed Security

An exploration of how growing hardware and software complexity creates security vulnerabilities through side-channel attacks, speculative execution, address translation, and voltage faults.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

How I Created My Clone Using AI - Next-Gen Social Engineering

A live technical demonstration of building a text, voice, and video bot that clones its creator for online impersonation and social engineering.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk