Black Hat Courses

OpenCrypto - Unchaining the JavaCard Ecosystem

Explore OpenCrypto, a library enabling full utilization of JavaCard capabilities across vendors. Learn about cryptographic coprocessors and ecosystem advancements in smart card technology.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

ShieldFS - The Last Word in Ransomware Resilient File Systems

Innovative file system solution to combat ransomware attacks, offering preventive and reactive security measures beyond traditional detection approaches for enhanced data protection.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Web Cache Deception Attack

Explore the Web Cache Deception attack, a new vector exposing sensitive user data through server and caching manipulation. Learn about risks, conditions, and mitigation strategies.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Practical Tips for Defending Web Applications in the Age of DevOps

Practical tips for adapting application security to modern DevOps practices, covering static analysis, dynamic scanning, and security visibility for rapid development cycles.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

3G - 4G Intranet Scanning and Its Application on the WormHole Vulnerability

Explore large-scale 3G/4G intranet scanning techniques and their application in detecting the WormHole vulnerability across millions of mobile devices in China's major ISPs.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The Irrelevance of K-Bytes Detection - Building a Robust Pipeline for Malicious Documents

Learn best practices for building a robust document analysis pipeline to detect malicious content, covering file type detection, sandboxing, content inspection, and evasion techniques used by attackers.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

The Industrial Revolution of Lateral Movement

Explore advancements in targeted attacks and lateral movement techniques, examining their impact on cybersecurity and potential parallels to the Industrial Revolution.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Escalating Insider Threats Using VMware's API

Discover how VMware's API can be exploited to escalate insider threats, bypassing security measures that separate infrastructure and guest machine domains in enterprise environments.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Honey, I Shrunk the Attack Surface - Adventures in Android Security Hardening

Explore Android's attack surface reduction strategies, their impact on security, and future improvements. Gain insights into technical approaches and specific bug mitigation in this comprehensive overview.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Challenges of Cooperation Across Cyberspace

Exploring challenges in cyberspace governance, including insufficient awareness among communities, international security dialogues, and the struggle to address war and peace issues in the digital realm.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Game of Chromes - Owning the Web with Zombie Chrome Extensions

Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

BlueBorne - A New Class of Airborne Attacks that can Remotely Compromise Any Linux - IoT Device

Discover the dangers of BlueBorne, a new airborne attack method that can remotely compromise Linux and IoT devices. Learn about zero-day exploits, their impact, and how to protect against these threats.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Red Team Techniques for Evading, Bypassing, and Disabling MS Advanced Threat Protection and Advanced Threat Analytics

Explore advanced techniques for evading and disabling Windows Defender ATP, including post-breach tools and behavior analytics. Gain insights into Red Team strategies for bypassing enterprise security measures.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Zero Days, Thousands of Nights - The Life & Times of Zero-Day Vulnerabilities and Their Exploits

Explore zero-day vulnerabilities and exploits through rare data analysis, revealing insights on their lifecycle, development, and implications for cybersecurity and policy.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Key Reinstallation Attacks - Breaking the WPA2 Protocol

Discover how key reinstallation attacks exploit WPA2 vulnerabilities, compromising network security. Learn about attack techniques, impacts, and countermeasures for better protection.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk