Black Hat Courses

Plundervolt - Flipping Bits from Software without Rowhammer

Explores Plundervolt, a software-based voltage fault attack that compromises Intel SGX enclaves and enables cryptographic key recovery.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep Learning

Use deep-learning explainability and dynamic analysis to pinpoint information leakage in cryptographic hardware implementations and reduce side-channel attack surfaces.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Emulating Samsung's Baseband for Security Testing

Emulate Samsung’s Shannon baseband to make cellular security testing reproducible, scalable, and fuzzable.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Needing the DoH - The Ongoing Encryption and Centralization of DNS

Examines how DNS-over-TLS and DNS-over-HTTPS encrypt DNS queries while introducing centralization, reduced enterprise visibility, and movement of resolution into applications.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

TiYunZong Exploit Chain to Remotely Root Modern Android Devices - Pwn Android Phones from 2015-2020

Technical walkthrough of TiYunZong, an exploit chain that remotely roots Qualcomm-based Android devices through Chrome and GPU vulnerabilities.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Reverse Engineering the Tesla Battery Management System to Increase Power Available

Reverse-engineer a Tesla Model S battery management system through CAN analysis, firmware changes, diagnostics, and shunt modification to increase available power.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Ruling StarCraft Game Spitefully - Exploiting the Blind Spot of AI-Powered Game Bots

Explore a practical adversarial-agent attack that trains one deep reinforcement learning bot to exploit an opponent’s weaknesses in competitive two-player games.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Breaking VSM by Attacking SecureKernel

An offensive research case study demonstrating two SecureKernel vulnerabilities and arbitrary code execution in Windows 10’s VBS environment.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Practical Defenses Against Adversarial Machine Learning

Examines real-world attacks on deployed machine-learning systems and practical defenses using block lists, multiple signals, human review, and limited model leakage.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Detecting Access Token Manipulation

Understand Windows access tokens, attacker manipulation techniques, and how defenders detect these attacks across enterprise environments.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Mind Games - Using Data to Solve for the Human Element

Use behavioral science, data, and motivation techniques to improve employees’ security behaviors and reduce human risk beyond ineffective annual training.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Finding New Bluetooth Low Energy Exploits via Reverse Engineering Multiple Vendors' Firmwares

Reverse-engineering multiple vendors’ Bluetooth Low Energy firmware to uncover proximity-triggered remote code execution vulnerabilities in the protocol’s lowest layers.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

EdTech - The Ultimate APT

A critical look at privacy, security, accountability, and harm reduction in educational technology.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Bypassing KPTI Using the Speculative Behavior of the SWAPGS Instruction

Explore how speculative execution of the SWAPGS instruction enables a side-channel attack that leaks kernel memory despite KPTI and related mitigations.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Implementing the Lessons Learned From a Major Cyber Attack

Lessons from Maersk’s NotPetya attack and the risk-based strategies used to strengthen cyber resilience, recovery, and business continuity.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk