Black Hat Courses

Ghost in the PLC - Designing an Undetectable Programmable Logic Controller Rootkit

Explore the design of undetectable rootkits for Programmable Logic Controllers, uncovering vulnerabilities and potential threats to industrial control systems.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Pocket-Sized Badness - Why Ransomware Comes as a Plot Twist in the Cat-Mouse Game

Explore the rise of ransomware as a disruptive force in cybersecurity, examining its unique characteristics, profit motives, and impact on the evolving landscape of digital threats.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs

Discover practical attacks on SSL VPNs, compromising corporate networks. Learn out-of-the-box security techniques, immediate mitigation strategies, and the vulnerabilities of Virtual Private Networks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Unpacking the Packed Unpacker - Reverse Engineering an Android Anti-Analysis Native Library

Explore techniques used by malware authors to prevent reverse engineering of Android native libraries, and learn strategies to overcome these anti-analysis traps.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

An Attacker Looks at Docker - Approaching Multi-Container Applications

Explore containerization's impact on offensive security operations, focusing on Docker's implications for penetration testing and application security in multi-container environments.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies

Uncover critical security vulnerabilities in trading technologies, including unencrypted data, DoS risks, and weak authentication. Learn about responsible disclosure and recommendations for safer trading practices.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs

Uncover hidden hardware backdoors in x86 CPUs, exploring their depth and implications. Learn about the feasibility of widespread hardware vulnerabilities and their potential impact on processor security.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Fire & Ice - Making and Breaking macOS Firewalls

Explore macOS firewall creation and vulnerabilities, covering kernel-level socket filtering, user-mode communication, secure installation, and self-defense mechanisms. Learn about firewall bypasses and potential weaknesses.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

How Can Communities Move Forward After Incidents of Sexual Harassment or Assault

Strategies for community response to sexual harassment/assault incidents, focusing on survivor support, accountability, and bystander intervention. Explores leadership roles and community healing.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Invoke-DOSfuscation - Techniques for CMD Obfuscation

Explore advanced cmd.exe obfuscation techniques, including carets, quotes, and stdin argument hiding. Learn complex methods like string manipulation and novel encoding approaches for enhanced command-line security.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Lies and Damn Lies - Getting Past the Hype of Endpoint Security Solutions

Debunking endpoint security buzzwords and hype. Practical insights on evaluating solutions beyond marketing claims, focusing on real-world effectiveness and meaningful metrics.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Intel AMT Stealth Breakthrough

Explore remote exploitation techniques for Intel Management Engine, affecting most Intel-based systems since 2010. Learn about vulnerabilities and potential security risks in this critical subsystem.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Defeating Samsung KNOX with Zero Privilege

Exploit chain to defeat Samsung KNOX security from zero privilege, bypassing KASLR, DFI, SELinux, and escalating privileges. Detailed vulnerabilities and mitigation bypassing techniques revealed.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

PEIMA - Harnessing Power Laws to Detect Malicious Activities

Explore power law-based techniques for detecting and mitigating DDoS attacks, intrusions, and other malicious network activities using PEIMA methodology.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

What's on the Wireless - Automating RF Signal Identification

Explore automated RF signal identification techniques for monitoring diverse wireless technologies in organizational environments, enhancing security and management capabilities.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk