Black Hat Courses

IoT Skimmer - Energy Market Manipulation through High-Wattage IoT Botnets

Explore how high-wattage IoT botnets can manipulate energy markets, impacting power grid demand and security. Learn about attack strategies, feasibility, and potential countermeasures.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Improving Mental Models of End-to-End Encrypted Communication

Explore user misconceptions about end-to-end encryption in messaging apps and strategies to improve understanding, enhancing secure communication practices.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Advanced VBA Macros Attack & Defence

Explore advanced VBA macro attack techniques and defense strategies, including VBA Stomping and improved analysis tools like olevba, to address modern malware delivery challenges.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds

Systematic study reveals vulnerabilities in IoT cloud platforms' MQTT integration, exposing risks of device control, DoS attacks, data theft, and status manipulation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Hackers, Journalists and the Ethical Swamp

Investigative journalist analyzes five high-profile hacking incidents, exploring trends and tactics in media manipulation and collaboration between hackers and reporters.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Money Doesn't Stink - Cybercriminal Business Insight of a New Android Botnet

Explore the inner workings of a cybercriminal group operating an Android botnet, including their hierarchy, challenges, and impact on victims' security.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Rough and Ready - Frameworks to Measure Persistent Engagement and Deterrence

Explore frameworks for assessing U.S. cybersecurity policy effectiveness, focusing on measuring persistent engagement and deterrence strategies in national defense.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Managing for Success - Maintaining a Healthy Bug Bounty Program Long Term

Strategies for maintaining an effective bug bounty program, focusing on incentives, communication, and researcher relationships to ensure high-value vulnerability reports and long-term success.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Ghidra - Journey from Classified NSA Tool to Open Source

Explore NSA's journey in developing and open-sourcing Ghidra, a powerful software reverse engineering framework. Learn about its features, impact, and future developments.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

How to Detect that Your Domains are Being Abused for Phishing by Using DNS

Learn to protect your domains from phishing attacks using DNS and email security protocols like SPF, DKIM, and DMARC. Discover advanced techniques for detecting and preventing domain abuse.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Bounty Operations - Best Practices and Common Pitfalls to Avoid in the First 6-12 Months

Insights from experienced bug bounty managers on program operations, triage strategies, and common vulnerabilities. Learn best practices and avoid pitfalls for successful bounty programs.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

The Future of ATO

Exploring the evolving landscape of Account Takeover (ATO) attacks, focusing on emerging threats, sophisticated techniques, and strategies to protect user accounts in the digital age.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Zombie Ant Farming - Practical Tips for Playing Hide and Seek with Linux EDRs

Explore techniques to evade Linux EDRs, including using approved executables as decoys and leveraging dynamic ELF loader primitives for stealthy post-exploitation capabilities.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Debug for Bug - Crack and Hack Apple Core by Itself

Explore Apple kernel vulnerabilities through fuzzing, including double free and out-of-bounds issues. Learn about debugging and fuzzing techniques for uncovering security flaws in Apple's core systems.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Operational Templates for State-Level Attack and Collective Defense of Countries

Explore templates for nation-level cyber attacks and defense strategies, examining various time horizons, attribution levels, and collective approaches to protect countries in cyberspace.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk