Black Hat Courses

Security Through Distrusting

Explore security approaches from trusting everything to distrusting nearly all components. Learn about innovative techniques for system protection and data leak prevention.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Diplomacy and Combating Evolving International Cyber Threats

Explore the evolving landscape of international cyber diplomacy, focusing on efforts to counter threats, promote norms, and address challenges in cyberspace from a policy perspective.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Attacking Encrypted USB Keys the Hard - ware Way

Explore hardware vulnerabilities in AES-encrypted USB devices through an audit of multiple keys and hard drives, revealing if they truly secure data as claimed.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Well, That Escalated Quickly! How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass and Persistence in the Hypervisor via Shadow Containers

Explore Docker API vulnerabilities leading to remote code execution, same-origin bypass, and hypervisor persistence via shadow containers. Gain insights into containerization security risks and mitigation strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Developing Trust and Gitting Betrayed

Explore trust relationships in business, analyzing vulnerabilities and exploitation techniques. Learn to identify, manage, and secure critical trust points in code, platforms, and organizational structures.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Network Automation is Not Your Safe Haven - Protocol Analysis and Vulnerabilities of Autonomic Network

Explores vulnerabilities in autonomic networks, focusing on Cisco's "Plug and Play" routers. Analyzes protocols and potential security risks in automated network systems.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Digital Vengeance - Exploiting the Most Notorious C&C Toolkits

Explore notorious command and control toolkits used in targeted attacks, learn about their vulnerabilities, and discover techniques to exploit and defend against these sophisticated threats.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Infecting the Enterprise - Abusing Office365 + Powershell for Covert C2

Explore potential security risks of Office365 adoption and learn how malicious actors can exploit these vulnerabilities for covert command and control using PowerShell in enterprise environments.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Breaking the Laws of Robotics - Attacking Industrial Robots

Explore vulnerabilities in industrial robots, their embedded controllers, and network connections. Learn about potential security risks in modern factory automation systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Why Most Cyber Security Training Fails and What We Can Do About It

Explores limitations of current cybersecurity awareness training and proposes innovative solutions to enhance effectiveness against spear phishing and other cyber threats.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Exploiting Network Printers

Discover vulnerabilities in network printers and learn how to exploit them for unauthorized access to confidential data in corporate environments.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Bochspwn Reloaded - Detecting Kernel Memory Disclosure with x86 Emulation and Taint Tracking

Explore kernel memory disclosure detection using x86 emulation and taint tracking. Learn about buffer overflows, memory corruption, and user-mode client interactions in kernel-mode systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

How We Created the First SHA-1 Collision and What it Means for Hash Security

Explore the creation of the first SHA-1 collision, its implications for hash security, and the challenges faced in developing a meaningful payload and scaling computation.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Behind the Plexiglass Curtain - Stats and Stories from the Black Hat NOC

Insider insights into Black Hat's network operations: statistics, anecdotes, and revelations from the Network Operations Center team's annual debrief.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Insecurity in Building Automation - How to Create Dark Buildings with Light Speed

Explore vulnerabilities in building automation systems, their potential for exploitation, and the implications for physical security in modern infrastructure.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk