Black Hat Courses

Adversary Detection Pipelines - Finally Making Your Threat Intel Useful

Learn to maximize your threat intelligence program's value, enhancing security across teams with practical strategies for effective adversary detection and intel utilization.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Discovering Hidden Properties to Attack the Node.js Ecosystem

Novel attack method against Node.js platform using hidden property abusing. Explores vulnerabilities in JavaScript data exchange to tamper with critical program states in server-side applications.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

iOS Kernel PAC, One Year Later

Análisis de la evolución y vulnerabilidades de la autenticación de punteros del kernel de iOS, con demostraciones de nuevos métodos para eludir la seguridad en iOS 13.3.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Detecting Fake 4G Base Stations in Real Time

Learn to detect and understand 4G/LTE IMSI-catchers, explore their capabilities, and discover software solutions for identifying fake base stations. Gain insights into cell network security improvements.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Demigod - The Art of Emulating Kernel Rootkits

Explore advanced techniques for emulating and analyzing kernel rootkits, enhancing cybersecurity defenses against high-privilege malware operating at the OS level.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

A Decade After Stuxnet's Printer Vulnerability - Printing is Still the Stairway to Heaven

Explore the enduring security risks in Windows Print Spooler service, a decade after Stuxnet's infamous exploit, and learn about current vulnerabilities in printing systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

When TLS Hacks You

Explore how TLS features can be exploited for attacks, focusing on Server-Side Request Forgery. Learn about a novel, cross-platform method to leverage TLS for targeting internal services.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Heroku Abuse Operations - Hunting Wolves in Sheep's Clothing

Explore techniques for detecting and responding to malicious activity disguised as legitimate use in cloud platforms. Learn to identify and mitigate abuse scenarios that bypass traditional security measures.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

FASTCash and INJX_Pure - How Threat Actors Use Public Standards for Financial Fraud

Explore how cybercriminals exploit public standards to conduct ATM fraud through INJX_Pure and Lazarus FASTCash malware, showcasing their programming skills and understanding of financial transactions.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Decade of the RATs – Custom Chinese Linux Rootkits for Everyone

Uncovers a decade-long, state-sponsored cyber espionage campaign targeting Linux servers, revealing custom malware and rootkits used in strategic attacks on government and industry infrastructure.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Whispers Among the Stars - A Practical Look at Perpetrating Satellite Eavesdropping Attacks

Experimental exploration of satellite broadband vulnerabilities using affordable equipment. Demonstrates eavesdropping techniques across land, air, and sea communications with minimal detection risk.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

EtherOops - Exploring Practical Methods to Exploit Ethernet Packet-in-Packet Attacks

Explore practical methods to exploit Ethernet packet-in-packet attacks, bypassing firewalls and NAT solutions. Learn how attackers can establish man-in-the-middle positions to eavesdrop on corporate communications.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Beyond Root - Custom Firmware for Embedded Mobile Chipsets

Explore reverse engineering techniques to bypass protections and expand functionality of embedded mobile chipsets, going beyond traditional rooting methods for complete device control.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Remote Timing Attacks on TPMs - AKA TPM-Fail

Uncovers vulnerabilities in Trusted Platform Modules through timing analysis, revealing potential security risks in hardware-based cryptographic systems used across various computing platforms.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Operation Chimera - APT Operation Targets Semiconductor Vendors

Analysis of APT attacks on semiconductor industry, focusing on Taiwan. Explores threat actors, campaigns, and security status, highlighting potential global supply chain impacts.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk