Black Hat Courses

Advanced Active Directory to Entra ID Lateral Movement Techniques

Explore advanced lateral movement techniques from Active Directory to Entra ID, bypassing authentication and MFA in hybrid environments with undocumented methods.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Exploiting DNS for Stealthy User Tracking

Discover how statistical analysis of DNS traffic enables precise device tracking and user fingerprinting across networks, plus learn defensive countermeasures.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

From Prompts to Pwns - Exploiting and Securing AI Agents

Explore AI agent security vulnerabilities through real-world exploits and learn defensive strategies for enterprise agentic systems from NVIDIA's AI Red Team experts.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Safe Harbor or Hostile Waters - Unveiling the Hidden Perils of the TorchScript Engine in PyTorch

Uncover critical security vulnerabilities in PyTorch's TorchScript engine that challenge the safety of weights_only=True, revealing RCE risks in AI applications.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

QUACK - Hindering Deserialization Attacks via Static Duck Typing

Discover QUACK, a framework that automatically protects applications from deserialization attacks using static duck typing to limit exploitable code gadgets by 97%.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Out of Control - How KCFG and KCET Redefine Control Flow Integrity in the Windows Kernel

Explore how KCFG and KCET revolutionize Windows kernel security through hypervisor-based control flow integrity, reshaping exploitation techniques and defensive strategies.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Diving into Windows HTTP - Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services

Uncover 100+ critical pre-auth vulnerabilities in Windows HTTP services like IIS, ADFS, and Hyper-V, including RCE, DoS, and info leakage exploits requiring no credentials.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Derandomizing the Location of Security-Critical Kernel Objects in the Linux Kernel

Discover a novel TLB timing side-channel attack that reveals locations of security-critical Linux kernel objects, enabling enhanced kernel exploitation techniques.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Clustered Points of Failure - Attacking Windows Server Failover Clusters

Uncover novel attack methodologies targeting Windows Server Failover Clusters, exposing how single node compromise leads to complete cluster takeover and domain compromise.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

XUnprotect - Reverse Engineering macOS XProtect Remediator

Uncover the inner workings of macOS XProtect Remediator through advanced reverse engineering techniques, revealing Apple's exclusive threat intelligence and novel detection mechanisms.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Weaponizing Apple AI for Offensive Operations

Discover how Apple's AI frameworks can be exploited for offensive cybersecurity operations, including payload embedding, covert communication, and AI-assisted command and control.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

From Spoofing to Tunneling - New Red Team's Networking Techniques for Initial Access and Evasion

Discover advanced red team networking techniques using stateless tunnels like GRE and VxLAN for initial access without phishing, plus evasion methods and VxLAN vulnerabilities.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Lost in Translation - Exploiting Unicode Normalization

Uncover how Unicode normalization flaws enable critical security bypasses, from WAF evasion to RCE attacks, with live demos and cutting-edge fuzzing techniques from Akamai's research team.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol

Uncover critical cryptographic vulnerabilities in OPC UA protocol that enable authentication bypass attacks, exploring practical exploits against industrial automation systems.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Consent and Compromise - Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications

Discover critical OAuth misconfigurations in Microsoft Entra ID that enabled unauthorized access to 20+ internal Microsoft applications, exposing sensitive data and admin privileges.

• YouTube
• 30 minutes
• Self-Paced
• Free Video