Black Hat Courses

Diving into Windows HTTP - Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services

Uncover 100+ critical pre-auth vulnerabilities in Windows HTTP services like IIS, ADFS, and Hyper-V, including RCE, DoS, and info leakage exploits requiring no credentials.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Derandomizing the Location of Security-Critical Kernel Objects in the Linux Kernel

Discover a novel TLB timing side-channel attack that reveals locations of security-critical Linux kernel objects, enabling enhanced kernel exploitation techniques.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Clustered Points of Failure - Attacking Windows Server Failover Clusters

Uncover novel attack methodologies targeting Windows Server Failover Clusters, exposing how single node compromise leads to complete cluster takeover and domain compromise.

• YouTube
• 39 minutes
• On-Demand
• Free Video

XUnprotect - Reverse Engineering macOS XProtect Remediator

Uncover the inner workings of macOS XProtect Remediator through advanced reverse engineering techniques, revealing Apple's exclusive threat intelligence and novel detection mechanisms.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Weaponizing Apple AI for Offensive Operations

Discover how Apple's AI frameworks can be exploited for offensive cybersecurity operations, including payload embedding, covert communication, and AI-assisted command and control.

• YouTube
• 22 minutes
• On-Demand
• Free Video

From Spoofing to Tunneling - New Red Team's Networking Techniques for Initial Access and Evasion

Discover advanced red team networking techniques using stateless tunnels like GRE and VxLAN for initial access without phishing, plus evasion methods and VxLAN vulnerabilities.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Lost in Translation - Exploiting Unicode Normalization

Uncover how Unicode normalization flaws enable critical security bypasses, from WAF evasion to RCE attacks, with live demos and cutting-edge fuzzing techniques from Akamai's research team.

• YouTube
• 34 minutes
• On-Demand
• Free Video

No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol

Uncover critical cryptographic vulnerabilities in OPC UA protocol that enable authentication bypass attacks, exploring practical exploits against industrial automation systems.

• YouTube
• 41 minutes
• On-Demand
• Free Video

The 11th Annual Black Hat USA Network Operations Center Report

Discover network security insights from Black Hat's NOC team as they reveal statistics, tools, and techniques for securing conference networks plus humorous WiFi behavior.

• YouTube
• 40 minutes
• On-Demand
• Free Video

CYBER! Please Check All Boxes Before You Get Pwned

Discover how checkbox security culture undermines real cyber defense and learn to refocus on addressing actual threats rather than compliance theater.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Inside the Ransomware Machine

Discover the inner workings of the ransomware economy through leaked data analysis and learn what drives these criminal enterprises and potential solutions to stop them.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Free Video

From Script Kiddie to Cyber Kingpin - Preventing the Predictable Progression

Explore the dark evolution from teenage hacking to serious cybercrime through the shocking Vastaamo case and learn how to break the cycle of predictable criminal progression.

• YouTube
• 56 minutes
• On-Demand
• Free Video

Who Gets to Point Fingers? Technical Capacity and International Accountability

Explore how Global South nations challenge Western-centric cyber attribution assumptions and develop alternative approaches to international accountability in cyberspace.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Back to the Future - Hacking and Securing Connection-based OAuth Architectures

Uncover critical vulnerabilities in connection-based OAuth architectures used by AI agents and integration platforms, with practical exploits and security best practices.

• YouTube
• 40 minutes
• On-Demand
• Free Video

AppleStorm - Unmasking the Privacy Risks of Apple Intelligence

Uncover the hidden privacy risks in Apple Intelligence through traffic analysis and OS inspection, revealing data flows and security concerns behind Apple's AI assistant claims.

• YouTube
• 41 minutes
• On-Demand
• Free Video