Black Hat Courses

Tinker Tailor LLM Spy - Investigate and Respond to Attacks on GenAI Chatbots

Discover how to investigate and respond to attacks on GenAI chatbots, including prompt injection incidents, using AI defense tooling and LLM guardrails for effective incident response.

• YouTube
• 39 minutes
• On-Demand
• Free Video

JDD - In-depth Mining of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction

Discover advanced techniques for mining Java deserialization vulnerabilities using bottom-up gadget search and dataflow-aided payload construction to identify zero-day exploits.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Think Inside the Box - In-the-Wild Abuse of Windows Sandbox in Targeted Attacks

Discover how APT groups exploit Windows Sandbox for evasion, analyzing Earth Kasha's tactics and learning defensive countermeasures for threat hunting.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Cyber Threats in the Age of AI

Explore Singapore's evolving cyber threat landscape as AI reshapes attack vectors while traditional threats like ransomware and APTs persist in this insightful keynote.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Weaponized Deception - Lessons from Indonesia's Muslim Cyber Army

Explore how Indonesia's Muslim Cyber Army pioneered weaponized deception tactics in cyberspace, featuring behavioral analysis and ethnographic insights from Islamic communities.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Perspectives on Trust in Hardware Supply Chains

Uncover the shadowy world of hardware supply chains and learn practical approaches to establishing trust in global manufacturing networks from industry expert bunnie Huang.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Should We Chat, Too? Security Analysis of WeChat's MMTLS Encryption Protocol

Discover critical security vulnerabilities in WeChat's proprietary MMTLS encryption protocol through comprehensive analysis by Citizen Lab researchers.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Operation BlackEcho - Voice Phishing Using Fake Financial and Vaccine Apps

Uncover sophisticated voice phishing tactics using malicious apps disguised as financial and vaccine applications, analyzing attack infrastructure and recent cybercrime trends.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Who Cares Where Waldo Is - Locating macOS Users Without Their Consent

Discover how attackers can bypass macOS location privacy controls to track users without consent through database vulnerabilities and third-party app exploits.

• YouTube
• 29 minutes
• On-Demand
• Free Video

One Bug to Rule Them All - Stably Exploiting a Preauth RCE Vulnerability on Windows Server 2025

Discover how to exploit CVE-2024-38077, a critical preauth RCE vulnerability affecting Windows Server 2003-2025, bypassing modern security mitigations for 0-click remote code execution.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Unveiling the Mysteries of Qualcomm's QDSP6 JTAG - A Journey into Advanced Theoretical Reverse Engineering

Uncover Qualcomm's QDSP6 JTAG mysteries through advanced theoretical reverse engineering techniques using patent analysis, firmware reverse engineering, and theoretical modeling.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Dismantling the SEOS Protocol

Discover how to reverse-engineer HID SEOS RFID protocol through the first open source implementation, revealing security insights for access control systems used in corporate environments.

• YouTube
• 27 minutes
• On-Demand
• Free Video

The ByzRP Solution - A Global Operational Shield for RPKI Validators

Discover how Byzantine RPKI (ByzRP) creates a robust, distributed shield against routing security attacks, bypassing RPKI vulnerabilities with zero downtime for global network protection.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Chained to Hit - Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software

Unveiling critical vulnerabilities in SAP enterprise software through analysis of the "P4" protocol, demonstrating tactics and techniques for remote and root access exploitation in mission-critical business systems.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Zero-Touch-Pwn - Abusing Zoom's Zero Touch Provisioning for Remote Attacks on Desk Phones

Uncover vulnerabilities in Zoom's Zero Touch Provisioning for desk phones, exploring potential remote attacks and security implications in cloud communication platforms.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk