Black Hat Courses

Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls

Discover techniques for crafting RFC-compliant email addresses that exploit parser discrepancies, allowing you to bypass security controls, spoof domains, and access protected systems.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

The GCP Jenga Tower: Hacking Millions of Google's Servers With a Single Package and More

Discover how cloud security complexity led to critical vulnerabilities in Google Cloud Platform, affecting millions of servers, and learn about the dangers of treating cloud services as black boxes.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

The Hack@DAC Story: Learnings from Organizing the World's Largest Hardware Hacking Competition

Discover insights from organizing Hack@DAC, the world's largest hardware hacking competition, including strategies, challenges, and impacts on the security research community over seven years of hosting 1000+ researchers.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

The Fundamentals of Cyber-Insurance

Discover the essential principles of cyber-insurance with VP R&D Tiago Henriques, exploring key concepts and applications in this specialized field.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Threat Hunting with LLM: From Discovering APT SAAIWC to Tracking APTs with AI

Discover how LLM helped identify APT SAAIWC and its applications in threat hunting, from generating YARA rules to broader threat intelligence, showcasing AI's potential in cybersecurity research.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Tracing Origins: Navigating Content Authenticity in the Deepfake Era

Explore the Coalition for Content Provenance and Authenticity (C2PA) initiative to combat deepfakes and trace media origins, examining implementation challenges and the balance between identification and anonymity.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets

Discover three new logic vulnerabilities in DNS response pre-processing that enable cache poisoning, denial-of-service, and resource-consuming attacks affecting major DNS software like BIND, PowerDNS, and Microsoft DNS.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

The Way to Android Root: Exploiting Your GPU on Smartphone

Dive into Adreno GPU security vulnerabilities that enable kernel code execution on Android devices, exploring exploitation techniques that bypass mitigations like CFI and W^X to achieve root privileges.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

The Hidden Treasure of Crash Reports - Understanding and Leveraging macOS Crash Data

Discover how crash reports can reveal malware infections, exploitation attempts, and buggy system code in macOS. Learn to analyze these files through reverse engineering techniques to identify critical security flaws.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

The Overlooked Attack Surface: Diving into Windows Client Components for RCE Vulnerabilities

Explore a new approach to discovering RCE vulnerabilities in Windows client components, examining overlooked attack surfaces in Performance Monitor, Event Viewer, Task Scheduler, and other critical Windows services.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

How Hackers Changed the Media and the Media Changed Hackers

Explore the complex relationship between cyber extortion gangs and journalists, examining ethical dilemmas, PR strategies, and the evolving dynamics of media coverage in cybersecurity incidents.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

From Doxing to Doorstep: Exposing Privacy Intrusion Techniques Used by Hackers for Extortion

Explore how doxing has evolved from exposing hackers' identities to a tool for real-world extortion, examining privacy intrusion techniques and the concerning trend of digital conflicts manifesting as physical violence.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Attacking Samsung Galaxy A* Boot Chain and Beyond

Dive into the exploitation of Samsung Galaxy A* boot chain vulnerabilities, focusing on the Little Kernel bootloader and bypassing secure boot mechanisms.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Windows Downdate: Downgrade Attacks Using Windows Updates

Explore how downgrade attacks can exploit Windows Updates to revert software to vulnerable versions, beyond the BlackLotus UEFI bootkit case that targeted Secure Boot.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

We R in a Right Pickle With All These Insecure Serialization Formats

Explore the security vulnerabilities of bytecode-driven serialization formats, with a deep dive into Python's pickle and R's RDS format, revealing never-before-seen insights into these widely used but potentially insecure tools.

• YouTube
• 40 minutes
• Self-Paced
• Free Video