Black Hat Courses

ARMageddon - How Your Smartphone CPU Breaks Software-Level Security and Privacy

Explore smartphone CPU vulnerabilities that compromise security and privacy, revealing potential threats to sensitive data and personal information without requiring permissions.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

EGO MARKET - When People's Greed for Fame Benefits Large-Scale Botnets

Uncover how botnets exploit social media for profit, using Linux/Moose 2.0 as a case study. Learn detection techniques and insights into the fake follower economy.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Breaking BHAD - Abusing Belkin Home Automation Devices

Exploración de vulnerabilidades en dispositivos de automatización del hogar Belkin WeMo, revelando fallas de seguridad y demostrando ataques potenciales en la infraestructura IoT.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Witchcraft Compiler Collection - Towards Self Aware Computer Programs

Explore innovative reverse engineering techniques to create self-aware binary code through relinking, binary reflection, and automated API prototyping, enhancing code reuse and debugging capabilities.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

How Your DRAM Becomes a Security Problem

Explore DRAM security vulnerabilities and side-channel attacks targeting row buffers, with implications for various devices and systems regardless of software or OS.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Exploiting Curiosity and Context - How to Make People Click on a Dangerous Link

Explores how curiosity and context influence clicking on dangerous links, analyzing user behavior and reasoning to improve cybersecurity strategies and protection mechanisms.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Applied Machine Learning for Data Exfil and Other Fun Topics

Explore machine learning applications in cybersecurity, including data exfiltration, network mapping, and botnet detection. Hands-on examples and tool demonstrations provided for practical implementation.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

A Journey From JNDI-LDAP Manipulation to Remote Code Execution Dream Land

Explore JNDI/LDAP vulnerabilities and exploitation techniques, from basic concepts to advanced remote code execution methods in Java-based enterprise applications.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Hell on Earth - From Browser to System Compromise

Explore cutting-edge browser exploitation techniques and kernel vulnerabilities from Pwn2Own 2016. Analyze attack vectors, root causes, and remediation strategies for achieving system-level access.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

The Linux Kernel Hidden Inside Windows 10

Explore the Linux kernel in Windows 10, its implementation, security implications, and potential vulnerabilities. Learn about system calls, process management, and attack surfaces in this unique OS integration.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

HTTP/2 & QUIC - Teaching Good Protocols to Do Bad Things

Explore multiplexing attacks in QUIC and HTTP/2 protocols, their impact on network security, and defense strategies against potential threats in modern web technologies.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Can You Trust Me Now? An Exploration Into the Mobile Threat Landscape

Comprehensive exploration of mobile security, examining hardware, software, and network components across platforms to uncover vulnerabilities and discuss protective measures for data and devices.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Breaking Payment Points of Interaction

Explore vulnerabilities in payment systems, focusing on bypassing protections in points of interaction devices. Live demonstrations showcase EMV bypassing and PIN protection avoidance.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Capturing 0Day Exploits With Perfectly Placed Hardware Traps

Innovative hardware-assisted approach to prevent control-flow hijack attacks, using processor features for real-time detection and prevention of abnormal branches in Windows and Linux systems.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Beyond the MCSE - Active Directory for the Security Professional

Comprehensive exploration of Active Directory's critical components, security features, and vulnerabilities, empowering security professionals to better defend enterprise resources against sophisticated attacks.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk