Black Hat Courses

Cross the Wall - Bypass All Modern Mitigations of Microsoft Edge

Explore techniques to bypass ASLR, DEP, and CFG exploit mitigations in Microsoft Edge on Windows 10, even with arbitrary address read/write capabilities.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Daily-Life Peeper - Bug Hunting and Exploit Techniques in IoT

Explore IoT security vulnerabilities, bug hunting techniques, and exploit methods. Learn to identify and address risks in everyday connected devices for improved cybersecurity.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Cyber Judo - Offensive Cyber Defense

Learn offensive techniques to enhance your organization's cyber defense against advanced, targeted attacks from security experts Itai Grady and Tal Be'ery.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Another Brick Off the Wall - Deconstructing Web Application Firewalls Using Automata Learning

Explore techniques for auditing and bypassing Web Application Firewalls using automata learning, with a focus on code injection attacks and grammar-oriented filter auditing.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Flip Feng Shui - Rowhammering the VM's Isolation

Explore how attackers can exploit Rowhammer vulnerabilities to compromise VM isolation, demonstrating practical attacks on OpenSSH and discussing implications for cloud security.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Rooting Every Android - From Extension to Exploitation

Explore Android rooting techniques, from kernel vulnerabilities to exploitation, addressing challenges like SELinux enforcement and limited attack surfaces in modern devices.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Backslash Powered Scanning - Hunting Unknown Vulnerability Classes

Explore innovative web scanning techniques to detect unknown injection vulnerabilities, moving beyond traditional payload-based methods for more comprehensive security testing.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Narcos, Counterfeiters and Scammers - An Approach to Visualize Illegal Markets

Visualizing online counterfeiting networks through passive DNS analysis, revealing cybercriminal strategies and providing insights for law enforcement to combat digital fraud.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Towards a Policy-Agnostic Control-Flow Integrity Implementation

Explore control-flow integrity implementation challenges, focusing on security and practicality. Learn about code-reuse attacks, randomization, and hardware-based solutions for robust CFI.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

I Know What You Saw Last Minute - The Chrome Browser Case

Explore HTTP Adaptive Streaming vulnerabilities in Chrome, focusing on YouTube's DASH implementation and potential privacy risks through traffic analysis and machine learning techniques.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Understanding Old Malware Tricks to Find New Malware Families

Explore advanced techniques for detecting and analyzing malware using machine learning, big data, and network analysis to stay ahead of evolving cyber threats.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Automating Incident Response

Streamline incident response with automation, reducing reliance on specialized skills. Learn to build an investigation engine, leverage ontologies, and enhance operational efficiency.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

How to Fool an ADC, Part II - Hiding Destruction of Turbine with a Little Help of Signal Processing

Explore techniques to manipulate analog-to-digital converters, focusing on signal processing methods to deceive industrial control systems and embedded devices. Learn potential vulnerabilities and their implications.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Chasing Foxes by the Numbers - Patterns of Life and Activity in Hacker Forums

Explore patterns of cyber criminal activity in underground forums, analyzing behavior across clear, deep, and dark web platforms to understand hacker communities and their focus areas.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Stumping the Mobile Chipset

Explore vulnerabilities in Android chipsets, focusing on Qualcomm's role in mobile security. Learn about recent issues and Google's responses to tighten Android's fragmented ecosystem.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk