Black Hat Courses

Auditing ActiveX Controls

Explore ActiveX Controls in Windows, covering auditing, testing, and monitoring techniques for enhanced security and vulnerability assessment.

• YouTube
• 1 hour 14 minutes
• On-Demand
• Conference Talk

Google Attacks

Explore Google attack techniques, including pentest examples, special characters, and keywords. Learn about honeypots and controlling Google data for enhanced cybersecurity.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Acting in Milliseconds - Why Defense Processes Need to Change

Explore cutting-edge cybersecurity defense strategies and the need for rapid response in the face of evolving threats. Learn why traditional processes must adapt to protect against modern attacks.

• YouTube
• 1 hour 21 minutes
• On-Demand
• Conference Talk

Managing MSIE Security in Corporate Networks by Creating Custom Internet Zones

Enhance corporate network security by creating custom Internet zones for MSIE, tailoring access controls and protection levels for different web resources.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Information Security Law Update

Comprehensive overview of recent legal developments in information security, covering key cases, legislation, and regulatory changes affecting cybersecurity professionals.

• YouTube
• 1 hour 18 minutes
• On-Demand
• Conference Talk

Yet Another Look at the State of Security

Explore cyber-insecurity's impact on the internet's growth with Whitfield Diffie. Gain historical and critical insights into current security challenges, fostering a balanced perspective on digital risks.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

How a Hacker Has Helped Influence the Government - and Vice Versa

Explore how a renowned hacker's expertise shapes government cybersecurity initiatives and fosters collaboration between researchers and officials in this insightful talk by Peiter Zatko.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Faces of Facebook - Or, How the Largest Real ID Database in the World Came to Be

Exploring privacy implications of combining social media images with face recognition technology for large-scale individual re-identification and sensitive information inference.

• YouTube
• 1 hour 5 minutes
• On-Demand
• Conference Talk

Weaponizing Wireless Networks - Attack Tool for Attacks against Sensor Networks

Explore a sophisticated attack tool for wireless sensor networks, demonstrating vulnerabilities and potential exploits to enhance security protocols and defensive measures.

• YouTube
• 1 hour 19 minutes
• On-Demand
• Conference Talk

Changing the Security Paradigm - Taking Back Your Network and Bringing Pain to the Adversary

Explore the evolving landscape of cybersecurity with former FBI Executive Shawn Henry. Learn strategies to combat advanced threats and shift from traditional defense to proactive offense.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

A Stitch in Time Saves Nine - A Case of Multiple Operating System Vulnerability

Explore CPU vulnerabilities and their exploitation across multiple operating systems. Learn about the "sysret" instruction flaw, its impact, and mitigation strategies for system security.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Advanced Heap Manipulation in Windows 8

Explore advanced heap manipulation techniques in Windows 8, focusing on deterministic heap state prediction, overcoming exploit mitigations, and crafting reliable exploits for kernel pool and user heap vulnerabilities.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

A Perfect CRIME? Only TIME Will Tell

Explore the TIME attack, an evolution of CRIME, which exploits HTTP response compression to break SSL encryption and Same Origin Policy. Learn about its simplified attack model and increased attack surface.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Identity - Economics, Security, and Terrorism

Explore the intersection of identity, economics, security, and terrorism in this thought-provoking talk by Adam Shostack, delving into crucial issues shaping our modern world.

• YouTube
• 1 hour 25 minutes
• On-Demand
• Conference Talk

Masquerades - Tricking Modern Authentication Systems

Explore techniques for bypassing modern authentication systems, including masquerading attacks and vulnerabilities in security protocols. Learn about potential risks and countermeasures.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk