Black Hat Courses

Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE

Explore Kerberos delegation vulnerabilities in Windows networks, learning techniques for unauthorized impersonation and remote code execution. Gain insights into potential security risks and mitigation strategies.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Domo Arigato, Mr. Roboto - Security Robots a la Unit-Testing

Explore security unit testing for custom code, focusing on inoculating applications, identifying endpoints, and addressing common vulnerabilities through automated testing frameworks.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Detach Me Not - DoS Attacks Against 4G Cellular Users Worldwide from Your Desk

Explores DoS attacks on 4G cellular networks, revealing vulnerabilities in mobile communication systems and their potential for user tracking and manipulation. Discusses implications for security and privacy in telecommunications.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Man-in-the-SCADA - Anatomy of Data Integrity Attacks in Industrial Control Systems

Explore data integrity attacks in industrial control systems, focusing on attacker perspectives and strategies for unauthorized access to control networks and equipment.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

When Virtualization Encounters AFL - A Portable Virtual Device Fuzzing Framework with AFL

Explore a portable virtual device fuzzing framework using AFL to enhance VM security. Learn techniques for identifying vulnerabilities in virtual devices and preventing VM escape attacks.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Conclusions and Key Takeaways from Black Hat Europe 2016

Insightful discussion on critical InfoSec trends and their impact on future strategies, featuring industry experts at Black Hat Europe 2016's closing session.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Signing Into One Billion Mobile App Accounts Effortlessly with OAuth2.0

Explore vulnerabilities in OAuth2.0 protocol when used for mobile app authentication, uncovering potential security risks in Single-Sign-On services for billions of users.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Drop the ROP - Fine-Grained Control-Flow Integrity for the Linux Kernel

Explore fine-grained Control-Flow Integrity for Linux kernel security, addressing ROP attacks and dynamic kernel modules. Learn advanced mitigation techniques and implementation challenges.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Exploiting USB-IP in Linux

Explore USB/IP vulnerabilities in Linux, including buffer overflow and data injection. Learn about architecture, protocol, and security implications of this USB device sharing framework.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Conclusions & Key Takeaways from Black Hat Asia 2017

Explore key cybersecurity insights from Black Hat Asia 2017, covering topics like attacker specialization, machine learning, digital nations, and biometrics.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

AI Based Antivirus - Can AlphaAV Win the Battle in Which Man Has Failed?

Explore deep learning-based antivirus technology with low false positive and negative rates, already in production since 2016. Learn about AI's potential to revolutionize cybersecurity.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Dig Into the Attack Surface of PDF and Gain 100+ CVEs in 1 Year

Explore PDF vulnerabilities, efficient fuzzing techniques, and attack surface analysis to uncover 100+ CVEs in a year, with statistical insights on security weaknesses.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Bypassing Clang's SafeStack for Fun and Profit

Explore SafeStack's vulnerabilities and potential bypasses in Clang compiler, analyzing implementation weaknesses and demonstrating practical exploitation techniques for memory corruption.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation

Explore new attacks on HTTP/2, the emerging Internet protocol. Learn about vulnerabilities, implementation flaws, and potential mitigations in this cutting-edge cybersecurity analysis.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Anti-Plugin - Don't Let Your App Play as an Android Plugin

Explore Android plugin technology's security risks and learn defensive strategies to protect your app from unauthorized loading and execution as a plugin.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk