Black Hat Courses

Pwning Cloud Vendors with Untraditional PostgreSQL Vulnerabilities

Explore PostgreSQL vulnerabilities in cloud services, including isolation issues and potential cross-account access attacks. Learn about real-world impacts and recent demonstrations of database security flaws.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Process Injection - Breaking All macOS Security Layers With a Single Vulnerability

Explore macOS security vulnerabilities through process injection, revealing how a single flaw can compromise multiple security layers and impact user data protection.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

BrokenMesh - New Attack Surfaces of Bluetooth Mesh

Explores vulnerabilities in Bluetooth Mesh networks, analyzing protocols, demonstrating attack surfaces, and introducing a BLE Mesh Fuzzer. Includes real-world cases and security recommendations.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Smishmash - Text Based 2FA Spoofing Using OSINT, Phishing Techniques and a Burner Phone

Explore techniques for circumventing text-based 2FA using OSINT, phishing, and burner phones. Learn to connect leaked credentials with likely 2FA phone numbers from public sources.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Breaking the Chrome Sandbox with Mojo

Explore Chrome's sandbox security, focusing on Mojo IPC services as potential targets for sandbox escapes. Learn about vulnerabilities and exploitation techniques in browser security.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Catch Me If You Can - Deterministic Discovery of Race Conditions with Fuzzing

Novel fuzzing approach for deterministic discovery of race condition bugs, enabling researchers to unearth and root cause serious concurrency issues while maintaining an enjoyable process.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Calculating Risk in the Era of Obscurity - Reading Between the Lines of Security Advisories

Explore systemic issues in security patches, their impact on enterprise security, and strategies to improve vendor servicing habits. Learn to interpret advisories and prioritize risk management.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

RollBack - A New Time-Agnostic Replay Attack Against the Automotive Remote Keyless Entry Systems

Unveils a novel time-agnostic replay attack on automotive remote keyless entry systems, exploiting vulnerabilities in rolling code implementations to gain unauthorized vehicle access.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Glitched on Earth by Humans - A Black-Box Security Evaluation of the SpaceX Starlink User Terminal

Explore the security vulnerabilities of SpaceX Starlink's User Terminal through black-box hardware evaluation, revealing how voltage fault injection can bypass firmware signature verification.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

ElectroVolt - Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron

Uncover novel attack vectors in Electron framework, leading to remote code execution in popular desktop apps despite security measures. Explore vulnerabilities in Discord, Teams, VSCode, and more.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Elevating Kerberos to the Next Level

Explore Kerberos authentication protocol's inner workings, focusing on local machine security implications and privilege escalation vulnerabilities in Windows enterprise networks.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

TruEMU - An Extensible, Open-Source, Whole-System iOS Emulator

Explore TruEMU, an open-source iOS emulator enabling complete kernel emulation, including SecureROM and USB stack. Learn about its advantages, implementation, and potential for security research and analysis.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Optical Sound Recovery from Lightweight Reflective Objects

Explore an optical side-channel attack that recovers sound from reflective objects, revealing potential vulnerabilities in home office settings during remote work.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Using Zero to Attack Zero-Knowledge Proof - ZKP PLONK

Explore a critical vulnerability in ZKP PLONK implementation, allowing forged proof creation. Learn how theory guides the attack and its practical execution through software vulnerabilities.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

macOS Vulnerabilities Hiding in Plain Sight

Uncover hidden macOS vulnerabilities by analyzing existing bug reports. Learn to spot overlooked security issues and improve your vulnerability detection skills for Apple's operating system.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk