Black Hat Courses

Real Humans Simulated Attacks - Usability Testing with Attack Scenarios

Explore user studies for security software, focusing on simulated attack scenarios to assess tool effectiveness and user behavior during threats.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Protecting Pentests - Recommendations for Performing More Secure Tests

Comprehensive recommendations for building secure penetration testing operations, including technical aspects, policies, procedures, and client communication strategies.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

They're Coming for Your Tools - Exploiting Design Flaws for Active Intrusion Prevention

Explore design flaws in popular attack tools and techniques, and learn strategies for active intrusion prevention in this cybersecurity presentation from Black Hat.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Automated Testing of Crypto Software Using Differential Fuzzing

Discover differential fuzzing for efficient cryptographic software testing, focusing on logic bugs rather than memory corruption. Learn principles, tools, and real-world applications.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

WSUSpendu - How to Hang WSUS Clients

Explore a novel approach to control networks through WSUS servers, bypassing limitations and potentially attacking air-gapped systems. Learn techniques, limitations, and protective measures.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Comparing Security Curricula and Accreditations to Industry Needs

Análisis de currículos de seguridad y acreditaciones frente a las necesidades de la industria, examinando su desarrollo, fuerzas que los moldean y soluciones propuestas para acreditar programas.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Taking DMA Attacks to the Next Level

Unveils a novel, undetectable DMA attack exploiting DDR4 hardware vulnerabilities, enabling arbitrary memory access in live systems using a custom FPGA probe during sleep state.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

The Art of Securing 100 Products

Learn practical approaches to scale application security, implement effective tools, and build a successful program for securing numerous products simultaneously.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

FlowFuzz - A Framework for Fuzzing OpenFlow-Enabled Software and Hardware Switches

Explore FlowFuzz, a fuzzing framework for SDN switches using OpenFlow protocol. Learn about testing and securing software-defined networking infrastructure.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Splunking Dark Tools - A Pentesters Guide to Pwnage Visualization

Explore data analytics and visualization tools for red team operations, enhancing pentesting capabilities through advanced consolidation and analysis techniques.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Go Nuclear - Breaking Radiation Monitoring Devices

Comprehensive exploration of vulnerabilities in radiation monitoring devices through reverse engineering, RF analysis, and hardware hacking, revealing critical security flaws in nuclear industry equipment.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Exploiting a Single SQLite Vulnerability Across Multiple Software

Uncover remote exploits in SQLite's memory corruption vulnerabilities, revealing potential attack surfaces across various applications using this widely-embedded database software.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Fighting the Previous War - Attacking and Defending in the Era of the Cloud

Updating attack and defense strategies for cloud-based systems, focusing on interdependence and pivoting techniques. Covers DDoS, footprinting, exploitation, persistence, and more in AWS environments.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Offensive Malware Analysis - Dissecting OSX/FruitFly via a Custom C&C Server

Explore malware analysis techniques using a custom C&C server for OSX/FruitFly. Learn to decode, monitor, and understand malware behavior for enhanced cybersecurity skills.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

How to Make Nation-State and Intelligence Attackers' Lives Much Harder on Mobile Networks

Explore advanced SS7 attacks and defenses using open-source firewall. Learn to trick attackers, reduce vulnerabilities, and enhance mobile network security against intelligence agencies.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk