Black Hat Courses

Taking DMA Attacks to the Next Level

Unveils a novel, undetectable DMA attack exploiting DDR4 hardware vulnerabilities, enabling arbitrary memory access in live systems using a custom FPGA probe during sleep state.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

The Art of Securing 100 Products

Learn practical approaches to scale application security, implement effective tools, and build a successful program for securing numerous products simultaneously.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

FlowFuzz - A Framework for Fuzzing OpenFlow-Enabled Software and Hardware Switches

Explore FlowFuzz, a fuzzing framework for SDN switches using OpenFlow protocol. Learn about testing and securing software-defined networking infrastructure.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Splunking Dark Tools - A Pentesters Guide to Pwnage Visualization

Explore data analytics and visualization tools for red team operations, enhancing pentesting capabilities through advanced consolidation and analysis techniques.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Go Nuclear - Breaking Radiation Monitoring Devices

Comprehensive exploration of vulnerabilities in radiation monitoring devices through reverse engineering, RF analysis, and hardware hacking, revealing critical security flaws in nuclear industry equipment.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Exploiting a Single SQLite Vulnerability Across Multiple Software

Uncover remote exploits in SQLite's memory corruption vulnerabilities, revealing potential attack surfaces across various applications using this widely-embedded database software.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Fighting the Previous War - Attacking and Defending in the Era of the Cloud

Updating attack and defense strategies for cloud-based systems, focusing on interdependence and pivoting techniques. Covers DDoS, footprinting, exploitation, persistence, and more in AWS environments.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Offensive Malware Analysis - Dissecting OSX/FruitFly via a Custom C&C Server

Explore malware analysis techniques using a custom C&C server for OSX/FruitFly. Learn to decode, monitor, and understand malware behavior for enhanced cybersecurity skills.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

How to Make Nation-State and Intelligence Attackers' Lives Much Harder on Mobile Networks

Explore advanced SS7 attacks and defenses using open-source firewall. Learn to trick attackers, reduce vulnerabilities, and enhance mobile network security against intelligence agencies.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Evilsploit - A Universal Hardware Hacking Toolkit

Innovative method for hardware hacking using connection matrix, enabling arbitrary analog-alike connections and versatile bus interfacing for comprehensive hardware exploitation.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Protecting Visual Assets - Digital Image Counter-Forensics

Explore counter-forensic techniques to safeguard image-based intelligence from exploitation attacks, addressing current and emerging threats in visual asset protection.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Breaking Electronic Door Locks Like You're on CSI - Cyber

Learn techniques for bypassing electronic door locks, exploring vulnerabilities and hacking methods used in popular media depictions of cybersecurity.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

All Your Emails Belong to Us - Exploiting Vulnerable Email Clients via Domain Name Collision

Explore email vulnerabilities and domain name collisions as potential security threats, focusing on protecting email accounts from advanced persistent threats and exploitation techniques.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Mobile-Telephony Threats in Asia

Explore the mobile-telephony cybercrime ecosystem in Asia through a 7-month honeypot study, revealing SMS scams, fraudulent calls, and VoIP phishing attempts. Gain insights into real threats facing mobile users.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Securely Implementing Network Protocols - Detecting and Preventing Logical Flaws

Explore model-based testing techniques to detect logical bugs in SSL/TLS and Wi-Fi implementations, enhancing network protocol security and implementation.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk