Black Hat Courses

An ACE Up the Sleeve - Designing Active Directory DACL Backdoors

Explore Active Directory DACL backdoors, their offensive potential, and stealth techniques. Learn about control relationships, elevation paths, and persistence methods in AD objects.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Cracking the Lens - Targeting HTTP's Hidden Attack-Surface

Explore hidden attack surfaces in modern web infrastructure, focusing on transparent systems for performance and analytics. Learn to identify and exploit overlooked vulnerabilities.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Stepping Up Our Game - Re-focusing the Security Community on Defense and Making Security Work for Everyone

Facebook CSO Alex Stamos discusses the evolving role of cybersecurity, emphasizing the need for a renewed focus on defense and making security accessible to all in an era of heightened digital risks and societal impact.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Broadpwn - Remotely Compromising Android and iOS via a Bug in Broadcom's Wi-Fi Chipsets

Explore a critical Wi-Fi vulnerability affecting millions of Android and iOS devices, its technical details, and potential for remote exploitation without user interaction.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Ichthyology - Phishing as a Science

Explore real-world phishing attacks, psychological tactics, and advanced prevention techniques. Learn evidence-based strategies to protect against credential theft in this insightful cybersecurity presentation.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Cloak & Dagger - From Two Permissions to Complete Control of the UI Feedback Loop

Unveiling Android vulnerabilities: combining permissions for stealthy UI control attacks, exploring security mechanisms, and discussing potential countermeasures and Android team responses.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Breaking the x86 Instruction Set

Uncover hidden x86 instructions and hardware bugs through innovative processor fuzzing techniques and page fault analysis, revealing chipset secrets.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Revoke-Obfuscation - PowerShell Obfuscation Detection and Evasion Using Science

Explore PowerShell obfuscation detection techniques using scientific methods, including character frequency analysis, cosine similarity, and machine learning algorithms for improved cybersecurity.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

How the Feds Caught Russian Mega-Carder Roman Seleznev

Uncover the intricate investigation that led to the capture of Russian hacker Roman Seleznev, responsible for massive credit card fraud and point-of-sale hacks, through electronic evidence and international cooperation.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Making Diversity a Priority in Security

Experts discuss strategies and initiatives to increase diversity in cybersecurity, addressing recruitment, retention, mentorship, and overcoming biases to create a more inclusive industry.

• YouTube
• 1 hour 41 minutes
• Self-Paced
• Conference Talk

What Malware Authors Don't Want You to Know - Evasive Hollow Process Injection

Explore undocumented hollow process injection techniques used by malware authors to evade detection and blend with legitimate system processes.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Remotely Compromising iOS via Wi-Fi and Escaping the Sandbox

Explore iOS vulnerabilities through Wi-Fi networks, including sandbox escapes and kernel bugs. Learn about attack vectors, exploitation techniques, and security implications for mobile devices.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Fried Apples - Jailbreak DIY

Explore iOS jailbreaking techniques, including persistence, patchfinding, and kernel protection bypass. Learn about internal structures and low-level details of modern jailbreaks for Apple devices.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Why We Are Not Building a Defendable Internet

Exploring the economic and political challenges in cybersecurity, examining incentives of key players, and discussing why current structures fail to produce desired security levels.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

The Seven Axioms of Security

Explore seven axioms for implementing proactive defense strategies in cybersecurity. Learn how to transition from reactive to proactive measures and discover the blueprint for future defense architecture.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk