Black Hat Courses

Backslash Powered Scanning - Hunting Unknown Vulnerability Classes

Explore innovative web scanning techniques to detect unknown injection vulnerabilities, moving beyond traditional payload-based methods for more comprehensive security testing.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Narcos, Counterfeiters and Scammers - An Approach to Visualize Illegal Markets

Visualizing online counterfeiting networks through passive DNS analysis, revealing cybercriminal strategies and providing insights for law enforcement to combat digital fraud.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Towards a Policy-Agnostic Control-Flow Integrity Implementation

Explore control-flow integrity implementation challenges, focusing on security and practicality. Learn about code-reuse attacks, randomization, and hardware-based solutions for robust CFI.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

I Know What You Saw Last Minute - The Chrome Browser Case

Explore HTTP Adaptive Streaming vulnerabilities in Chrome, focusing on YouTube's DASH implementation and potential privacy risks through traffic analysis and machine learning techniques.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Understanding Old Malware Tricks to Find New Malware Families

Explore advanced techniques for detecting and analyzing malware using machine learning, big data, and network analysis to stay ahead of evolving cyber threats.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Automating Incident Response

Streamline incident response with automation, reducing reliance on specialized skills. Learn to build an investigation engine, leverage ontologies, and enhance operational efficiency.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

How to Fool an ADC, Part II - Hiding Destruction of Turbine with a Little Help of Signal Processing

Explore techniques to manipulate analog-to-digital converters, focusing on signal processing methods to deceive industrial control systems and embedded devices. Learn potential vulnerabilities and their implications.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Chasing Foxes by the Numbers - Patterns of Life and Activity in Hacker Forums

Explore patterns of cyber criminal activity in underground forums, analyzing behavior across clear, deep, and dark web platforms to understand hacker communities and their focus areas.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Stumping the Mobile Chipset

Explore vulnerabilities in Android chipsets, focusing on Qualcomm's role in mobile security. Learn about recent issues and Google's responses to tighten Android's fragmented ecosystem.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Ghost in the PLC - Designing an Undetectable Programmable Logic Controller Rootkit

Explore the design of undetectable rootkits for Programmable Logic Controllers, uncovering vulnerabilities and potential threats to industrial control systems.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Pocket-Sized Badness - Why Ransomware Comes as a Plot Twist in the Cat-Mouse Game

Explore the rise of ransomware as a disruptive force in cybersecurity, examining its unique characteristics, profit motives, and impact on the evolving landscape of digital threats.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs

Discover practical attacks on SSL VPNs, compromising corporate networks. Learn out-of-the-box security techniques, immediate mitigation strategies, and the vulnerabilities of Virtual Private Networks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Unpacking the Packed Unpacker - Reverse Engineering an Android Anti-Analysis Native Library

Explore techniques used by malware authors to prevent reverse engineering of Android native libraries, and learn strategies to overcome these anti-analysis traps.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

An Attacker Looks at Docker - Approaching Multi-Container Applications

Explore containerization's impact on offensive security operations, focusing on Docker's implications for penetration testing and application security in multi-container environments.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies

Uncover critical security vulnerabilities in trading technologies, including unencrypted data, DoS risks, and weak authentication. Learn about responsible disclosure and recommendations for safer trading practices.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk