Black Hat Courses

Passive Fingerprinting of HTTP - 2 Clients

Explore passive fingerprinting techniques for HTTP/2 clients, analyzing millions of connections to extract unique user agent fingerprints across various implementations.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Hiding PIN's Artifacts to Defeat Evasive Malware

Practical approach to enhance DBI tools' stealth and resilience against anti-instrumentation attacks, improving malware analysis and evasion detection techniques.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

By-Design Backdooring of Encryption System - Can We Trust Foreign Encryption Algorithms

Explores mathematical backdoors in encryption algorithms, discussing design, detection, and implications for cryptographic trust and control. Examines historical cases and future challenges in algorithm security.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Skype and Type - Keystroke Leakage over VoIP

Revealing how VoIP software can leak keystroke information through audio, compromising user privacy. Presents S&T tool to demonstrate vulnerability in popular platforms like Skype and Google Hangouts.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Intel SGX Remote Attestation is Not Sufficient

Explore the limitations of Intel SGX Remote Attestation for ensuring confidentiality and integrity of unmodified cloud applications.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

RBN Reloaded - Amplifying Signals from the Underground

Explore how combining SIGINT and HUMINT enhances threat intelligence, providing deeper insights into adversary tactics, intent, and vulnerabilities for improved cybersecurity decision-making.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Garbage In, Garbage Out - How Purportedly Great Machine Learning Models Can Be Screwed Up by Bad Data

Explores how data quality impacts machine learning models for malicious URL detection, comparing results across different datasets and analyzing feature activations in neural networks.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Free-Fall - Hacking Tesla from Wireless to CAN Bus

Detailed exploration of Tesla's security vulnerabilities, from wireless attacks to CAN bus access, including Tesla's response and new mitigation strategies.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Quantifying Risk in Consumer Software at Scale - Consumer Reports' Digital Standard

Explore methodologies for quantifying software security risks, predicting vulnerabilities, and evaluating consumer products using the Digital Standard developed by Consumer Reports and CITL.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Are Cyber-Attacks on the Power Grid Limited to Nation-State Actors?

Explore power grid vulnerabilities, live demo of feeder relay exploitation, and mitigation strategies. Learn about securing critical infrastructure and the responsible disclosure process.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

The Origin of Array Species - How Standards Drive Bugs in Script Engines

Exploring JavaScript's unique features and how they lead to vulnerabilities in various software, including Flash, Chrome, Edge, and Safari. Insights for developers and security researchers.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

AVPASS - Leaking and Bypassing Antivirus Detection Model Automatically

Explore techniques for leaking and bypassing antivirus detection models, including APK perturbation, model leaking, and auto-bypassing processes. Gain insights into commercial AV weaknesses.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Firmware is the New Black - Analyzing Past Three Years of BIOS - UEFI Security Vulnerabilities

Explore the rise of firmware vulnerabilities in recent years, their impact on system security, and the challenges in mitigating these threats in BIOS/UEFI environments.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

The Shadow Brokers - Cyber Fear Game-Changers

Explore the impact of The Shadow Brokers' leaks on cybersecurity, examining sophisticated nation-state tools and the evolving landscape of cyber fear as a geopolitical instrument.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Automated Detection of Vulnerabilities in Black-Box Routers and Other Network Devices

Discover a formal method for detecting protocol implementation vulnerabilities in closed-source network devices, focusing on OSPF in routers, without accessing source code or binaries.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk