Black Hat Courses

GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs

Uncover hidden hardware backdoors in x86 CPUs, exploring their depth and implications. Learn about the feasibility of widespread hardware vulnerabilities and their potential impact on processor security.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Fire & Ice - Making and Breaking macOS Firewalls

Explore macOS firewall creation and vulnerabilities, covering kernel-level socket filtering, user-mode communication, secure installation, and self-defense mechanisms. Learn about firewall bypasses and potential weaknesses.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

How Can Communities Move Forward After Incidents of Sexual Harassment or Assault

Strategies for community response to sexual harassment/assault incidents, focusing on survivor support, accountability, and bystander intervention. Explores leadership roles and community healing.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Invoke-DOSfuscation - Techniques for CMD Obfuscation

Explore advanced cmd.exe obfuscation techniques, including carets, quotes, and stdin argument hiding. Learn complex methods like string manipulation and novel encoding approaches for enhanced command-line security.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Lies and Damn Lies - Getting Past the Hype of Endpoint Security Solutions

Debunking endpoint security buzzwords and hype. Practical insights on evaluating solutions beyond marketing claims, focusing on real-world effectiveness and meaningful metrics.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Intel AMT Stealth Breakthrough

Explore remote exploitation techniques for Intel Management Engine, affecting most Intel-based systems since 2010. Learn about vulnerabilities and potential security risks in this critical subsystem.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Defeating Samsung KNOX with Zero Privilege

Exploit chain to defeat Samsung KNOX security from zero privilege, bypassing KASLR, DFI, SELinux, and escalating privileges. Detailed vulnerabilities and mitigation bypassing techniques revealed.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

PEIMA - Harnessing Power Laws to Detect Malicious Activities

Explore power law-based techniques for detecting and mitigating DDoS attacks, intrusions, and other malicious network activities using PEIMA methodology.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

What's on the Wireless - Automating RF Signal Identification

Explore automated RF signal identification techniques for monitoring diverse wireless technologies in organizational environments, enhancing security and management capabilities.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Go to Hunt, Then Sleep

Bedtime story-style guide for cybersecurity professionals on conducting threat hunts. Covers five essential hunts to find bad actors and improve organizational security.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Hourglass Model 2.0 - Case Study of Southeast Asia Underground Services Abusing Global 2FA

Explore the Hourglass Model 2.0 framework for gathering security intelligence on underground marketplaces, focusing on 2FA abuse in Southeast Asia and its implications for threat prevention.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Nation-State Moneymule's Hunting Season - APT Attacks Targeting Financial Institutions

Unveiling recent APT campaigns targeting financial institutions, including banks, ATM companies, and Bitcoin exchanges, with insights on malware, vulnerabilities, and attack vectors.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Server Tailgating - A Chosen-Plaintext Attack on RDP

Uncover a chosen-plaintext attack on Windows authentication, exploiting a vulnerability in common protocols. Learn about the attack's mechanics, implications for network security, and mitigation strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Datacenter Orchestration Security and Insecurity - Assessing Kubernetes, Mesos, and Docker at Scale

Explore security challenges and solutions for large-scale datacenter orchestration platforms like Kubernetes, Mesos, and Docker, focusing on cloud-scale infrastructure and software-defined datacenters.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Hacking Hardware with a $10 SD Card Reader

Explore firmware extraction techniques using affordable SD card readers, bypassing expensive tools and complex setups for efficient hardware hacking and analysis.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk