Black Hat Courses

Signing Into One Billion Mobile App Accounts Effortlessly with OAuth2.0

Explore vulnerabilities in OAuth2.0 protocol when used for mobile app authentication, uncovering potential security risks in Single-Sign-On services for billions of users.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Drop the ROP - Fine-Grained Control-Flow Integrity for the Linux Kernel

Explore fine-grained Control-Flow Integrity for Linux kernel security, addressing ROP attacks and dynamic kernel modules. Learn advanced mitigation techniques and implementation challenges.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Exploiting USB-IP in Linux

Explore USB/IP vulnerabilities in Linux, including buffer overflow and data injection. Learn about architecture, protocol, and security implications of this USB device sharing framework.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Conclusions & Key Takeaways from Black Hat Asia 2017

Explore key cybersecurity insights from Black Hat Asia 2017, covering topics like attacker specialization, machine learning, digital nations, and biometrics.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

AI Based Antivirus - Can AlphaAV Win the Battle in Which Man Has Failed?

Explore deep learning-based antivirus technology with low false positive and negative rates, already in production since 2016. Learn about AI's potential to revolutionize cybersecurity.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Dig Into the Attack Surface of PDF and Gain 100+ CVEs in 1 Year

Explore PDF vulnerabilities, efficient fuzzing techniques, and attack surface analysis to uncover 100+ CVEs in a year, with statistical insights on security weaknesses.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Bypassing Clang's SafeStack for Fun and Profit

Explore SafeStack's vulnerabilities and potential bypasses in Clang compiler, analyzing implementation weaknesses and demonstrating practical exploitation techniques for memory corruption.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation

Explore new attacks on HTTP/2, the emerging Internet protocol. Learn about vulnerabilities, implementation flaws, and potential mitigations in this cutting-edge cybersecurity analysis.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Anti-Plugin - Don't Let Your App Play as an Android Plugin

Explore Android plugin technology's security risks and learn defensive strategies to protect your app from unauthorized loading and execution as a plugin.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Cross the Wall - Bypass All Modern Mitigations of Microsoft Edge

Explore techniques to bypass ASLR, DEP, and CFG exploit mitigations in Microsoft Edge on Windows 10, even with arbitrary address read/write capabilities.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Daily-Life Peeper - Bug Hunting and Exploit Techniques in IoT

Explore IoT security vulnerabilities, bug hunting techniques, and exploit methods. Learn to identify and address risks in everyday connected devices for improved cybersecurity.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Cyber Judo - Offensive Cyber Defense

Learn offensive techniques to enhance your organization's cyber defense against advanced, targeted attacks from security experts Itai Grady and Tal Be'ery.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Another Brick Off the Wall - Deconstructing Web Application Firewalls Using Automata Learning

Explore techniques for auditing and bypassing Web Application Firewalls using automata learning, with a focus on code injection attacks and grammar-oriented filter auditing.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Flip Feng Shui - Rowhammering the VM's Isolation

Explore how attackers can exploit Rowhammer vulnerabilities to compromise VM isolation, demonstrating practical attacks on OpenSSH and discussing implications for cloud security.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Rooting Every Android - From Extension to Exploitation

Explore Android rooting techniques, from kernel vulnerabilities to exploitation, addressing challenges like SELinux enforcement and limited attack surfaces in modern devices.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk