Black Hat Courses

Go to Hunt, Then Sleep

Bedtime story-style guide for cybersecurity professionals on conducting threat hunts. Covers five essential hunts to find bad actors and improve organizational security.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Hourglass Model 2.0 - Case Study of Southeast Asia Underground Services Abusing Global 2FA

Explore the Hourglass Model 2.0 framework for gathering security intelligence on underground marketplaces, focusing on 2FA abuse in Southeast Asia and its implications for threat prevention.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Nation-State Moneymule's Hunting Season - APT Attacks Targeting Financial Institutions

Unveiling recent APT campaigns targeting financial institutions, including banks, ATM companies, and Bitcoin exchanges, with insights on malware, vulnerabilities, and attack vectors.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Server Tailgating - A Chosen-Plaintext Attack on RDP

Uncover a chosen-plaintext attack on Windows authentication, exploiting a vulnerability in common protocols. Learn about the attack's mechanics, implications for network security, and mitigation strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Datacenter Orchestration Security and Insecurity - Assessing Kubernetes, Mesos, and Docker at Scale

Explore security challenges and solutions for large-scale datacenter orchestration platforms like Kubernetes, Mesos, and Docker, focusing on cloud-scale infrastructure and software-defined datacenters.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Hacking Hardware with a $10 SD Card Reader

Explore firmware extraction techniques using affordable SD card readers, bypassing expensive tools and complex setups for efficient hardware hacking and analysis.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

OpenCrypto - Unchaining the JavaCard Ecosystem

Explore OpenCrypto, a library enabling full utilization of JavaCard capabilities across vendors. Learn about cryptographic coprocessors and ecosystem advancements in smart card technology.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

ShieldFS - The Last Word in Ransomware Resilient File Systems

Innovative file system solution to combat ransomware attacks, offering preventive and reactive security measures beyond traditional detection approaches for enhanced data protection.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Web Cache Deception Attack

Explore the Web Cache Deception attack, a new vector exposing sensitive user data through server and caching manipulation. Learn about risks, conditions, and mitigation strategies.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Practical Tips for Defending Web Applications in the Age of DevOps

Practical tips for adapting application security to modern DevOps practices, covering static analysis, dynamic scanning, and security visibility for rapid development cycles.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

3G - 4G Intranet Scanning and Its Application on the WormHole Vulnerability

Explore large-scale 3G/4G intranet scanning techniques and their application in detecting the WormHole vulnerability across millions of mobile devices in China's major ISPs.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The Irrelevance of K-Bytes Detection - Building a Robust Pipeline for Malicious Documents

Learn best practices for building a robust document analysis pipeline to detect malicious content, covering file type detection, sandboxing, content inspection, and evasion techniques used by attackers.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

The Industrial Revolution of Lateral Movement

Explore advancements in targeted attacks and lateral movement techniques, examining their impact on cybersecurity and potential parallels to the Industrial Revolution.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Escalating Insider Threats Using VMware's API

Discover how VMware's API can be exploited to escalate insider threats, bypassing security measures that separate infrastructure and guest machine domains in enterprise environments.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Honey, I Shrunk the Attack Surface - Adventures in Android Security Hardening

Explore Android's attack surface reduction strategies, their impact on security, and future improvements. Gain insights into technical approaches and specific bug mitigation in this comprehensive overview.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk