Black Hat Courses

Wire Me Through Machine Learning

Explore how machine learning can combat Business Email Compromise scams, a sophisticated threat that has cost organizations billions in losses through fraudulent wire transfers.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Orange is the New Purple - How and Why to Integrate Development Teams with Red - Blue Teams to Build More Secure Software

Explore a new paradigm for integrating development teams with offensive and defensive teams to enhance software security throughout the development lifecycle, fostering knowledge sharing and strengthening defenses.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Myth and Truth About Hypervisor-Based Kernel Protector - The Reason Why You Need Shadow-Box

Explore hypervisor-based kernel protection, its limitations, and the need for higher-privilege solutions like Shadow-Box to combat rootkits and kernel exploits effectively.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Hack Microsoft Using Microsoft Signed Binaries

Explore advanced hacking techniques using Microsoft-signed tools, including PowerShell and debuggers, to achieve various attacks and persistence on Windows systems.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Never Let Your Guard Down - Finding Unguarded Gates to Bypass Control Flow Guard with Big Data

Explore techniques to bypass Control Flow Guard in Windows using big data analysis, focusing on unguarded gates and indirect branches for enhanced security understanding.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Betting Against the House - Security and Stability When the Odds are Against You

Insights on designing and securing enterprise networks under constraints, drawing from Black Hat's network experiences. Covers evolution, challenges, and future directions in network management.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

MASHaBLE - Mobile Applications of Secret Handshakes Over Bluetooth LE

Explore cryptographic secret handshakes for mobile devices using Bluetooth LE, enabling mutual authentication between untrusted parties in virtual secret communities.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

CTX - Eliminating BREACH with Context Hiding

Explore advanced techniques to mitigate BREACH attacks in web applications using compression and encryption. Learn about Context Hiding and its implementation in practical scenarios.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Randomization Can't Stop BPF JIT Spray

Explores Linux BPF JIT compiler vulnerabilities, demonstrating how randomization fails to prevent JIT spray attacks and proposing mitigations for enhanced kernel security.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE

Explore Kerberos delegation vulnerabilities in Windows networks, learning techniques for unauthorized impersonation and remote code execution. Gain insights into potential security risks and mitigation strategies.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Domo Arigato, Mr. Roboto - Security Robots a la Unit-Testing

Explore security unit testing for custom code, focusing on inoculating applications, identifying endpoints, and addressing common vulnerabilities through automated testing frameworks.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Detach Me Not - DoS Attacks Against 4G Cellular Users Worldwide from Your Desk

Explores DoS attacks on 4G cellular networks, revealing vulnerabilities in mobile communication systems and their potential for user tracking and manipulation. Discusses implications for security and privacy in telecommunications.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Man-in-the-SCADA - Anatomy of Data Integrity Attacks in Industrial Control Systems

Explore data integrity attacks in industrial control systems, focusing on attacker perspectives and strategies for unauthorized access to control networks and equipment.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

When Virtualization Encounters AFL - A Portable Virtual Device Fuzzing Framework with AFL

Explore a portable virtual device fuzzing framework using AFL to enhance VM security. Learn techniques for identifying vulnerabilities in virtual devices and preventing VM escape attacks.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Conclusions and Key Takeaways from Black Hat Europe 2016

Insightful discussion on critical InfoSec trends and their impact on future strategies, featuring industry experts at Black Hat Europe 2016's closing session.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk