Black Hat Courses

Evilsploit - A Universal Hardware Hacking Toolkit

Innovative method for hardware hacking using connection matrix, enabling arbitrary analog-alike connections and versatile bus interfacing for comprehensive hardware exploitation.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Protecting Visual Assets - Digital Image Counter-Forensics

Explore counter-forensic techniques to safeguard image-based intelligence from exploitation attacks, addressing current and emerging threats in visual asset protection.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Breaking Electronic Door Locks Like You're on CSI - Cyber

Learn techniques for bypassing electronic door locks, exploring vulnerabilities and hacking methods used in popular media depictions of cybersecurity.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

All Your Emails Belong to Us - Exploiting Vulnerable Email Clients via Domain Name Collision

Explore email vulnerabilities and domain name collisions as potential security threats, focusing on protecting email accounts from advanced persistent threats and exploitation techniques.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Mobile-Telephony Threats in Asia

Explore the mobile-telephony cybercrime ecosystem in Asia through a 7-month honeypot study, revealing SMS scams, fraudulent calls, and VoIP phishing attempts. Gain insights into real threats facing mobile users.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Securely Implementing Network Protocols - Detecting and Preventing Logical Flaws

Explore model-based testing techniques to detect logical bugs in SSL/TLS and Wi-Fi implementations, enhancing network protocol security and implementation.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Wire Me Through Machine Learning

Explore how machine learning can combat Business Email Compromise scams, a sophisticated threat that has cost organizations billions in losses through fraudulent wire transfers.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Orange is the New Purple - How and Why to Integrate Development Teams with Red - Blue Teams to Build More Secure Software

Explore a new paradigm for integrating development teams with offensive and defensive teams to enhance software security throughout the development lifecycle, fostering knowledge sharing and strengthening defenses.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Myth and Truth About Hypervisor-Based Kernel Protector - The Reason Why You Need Shadow-Box

Explore hypervisor-based kernel protection, its limitations, and the need for higher-privilege solutions like Shadow-Box to combat rootkits and kernel exploits effectively.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Hack Microsoft Using Microsoft Signed Binaries

Explore advanced hacking techniques using Microsoft-signed tools, including PowerShell and debuggers, to achieve various attacks and persistence on Windows systems.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Never Let Your Guard Down - Finding Unguarded Gates to Bypass Control Flow Guard with Big Data

Explore techniques to bypass Control Flow Guard in Windows using big data analysis, focusing on unguarded gates and indirect branches for enhanced security understanding.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Betting Against the House - Security and Stability When the Odds are Against You

Insights on designing and securing enterprise networks under constraints, drawing from Black Hat's network experiences. Covers evolution, challenges, and future directions in network management.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

MASHaBLE - Mobile Applications of Secret Handshakes Over Bluetooth LE

Explore cryptographic secret handshakes for mobile devices using Bluetooth LE, enabling mutual authentication between untrusted parties in virtual secret communities.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

CTX - Eliminating BREACH with Context Hiding

Explore advanced techniques to mitigate BREACH attacks in web applications using compression and encryption. Learn about Context Hiding and its implementation in practical scenarios.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Randomization Can't Stop BPF JIT Spray

Explores Linux BPF JIT compiler vulnerabilities, demonstrating how randomization fails to prevent JIT spray attacks and proposing mitigations for enhanced kernel security.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk