Black Hat Courses

Challenges of Cooperation Across Cyberspace

Exploring challenges in cyberspace governance, including insufficient awareness among communities, international security dialogues, and the struggle to address war and peace issues in the digital realm.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Game of Chromes - Owning the Web with Zombie Chrome Extensions

Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

BlueBorne - A New Class of Airborne Attacks that can Remotely Compromise Any Linux - IoT Device

Discover the dangers of BlueBorne, a new airborne attack method that can remotely compromise Linux and IoT devices. Learn about zero-day exploits, their impact, and how to protect against these threats.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Red Team Techniques for Evading, Bypassing, and Disabling MS Advanced Threat Protection and Advanced Threat Analytics

Explore advanced techniques for evading and disabling Windows Defender ATP, including post-breach tools and behavior analytics. Gain insights into Red Team strategies for bypassing enterprise security measures.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Zero Days, Thousands of Nights - The Life & Times of Zero-Day Vulnerabilities and Their Exploits

Explore zero-day vulnerabilities and exploits through rare data analysis, revealing insights on their lifecycle, development, and implications for cybersecurity and policy.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Key Reinstallation Attacks - Breaking the WPA2 Protocol

Discover how key reinstallation attacks exploit WPA2 vulnerabilities, compromising network security. Learn about attack techniques, impacts, and countermeasures for better protection.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Security Through Distrusting

Explore security approaches from trusting everything to distrusting nearly all components. Learn about innovative techniques for system protection and data leak prevention.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Diplomacy and Combating Evolving International Cyber Threats

Explore the evolving landscape of international cyber diplomacy, focusing on efforts to counter threats, promote norms, and address challenges in cyberspace from a policy perspective.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Attacking Encrypted USB Keys the Hard - ware Way

Explore hardware vulnerabilities in AES-encrypted USB devices through an audit of multiple keys and hard drives, revealing if they truly secure data as claimed.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Well, That Escalated Quickly! How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass and Persistence in the Hypervisor via Shadow Containers

Explore Docker API vulnerabilities leading to remote code execution, same-origin bypass, and hypervisor persistence via shadow containers. Gain insights into containerization security risks and mitigation strategies.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Developing Trust and Gitting Betrayed

Explore trust relationships in business, analyzing vulnerabilities and exploitation techniques. Learn to identify, manage, and secure critical trust points in code, platforms, and organizational structures.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Network Automation is Not Your Safe Haven - Protocol Analysis and Vulnerabilities of Autonomic Network

Explores vulnerabilities in autonomic networks, focusing on Cisco's "Plug and Play" routers. Analyzes protocols and potential security risks in automated network systems.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Digital Vengeance - Exploiting the Most Notorious C&C Toolkits

Explore notorious command and control toolkits used in targeted attacks, learn about their vulnerabilities, and discover techniques to exploit and defend against these sophisticated threats.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Infecting the Enterprise - Abusing Office365 + Powershell for Covert C2

Explore potential security risks of Office365 adoption and learn how malicious actors can exploit these vulnerabilities for covert command and control using PowerShell in enterprise environments.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Breaking the Laws of Robotics - Attacking Industrial Robots

Explore vulnerabilities in industrial robots, their embedded controllers, and network connections. Learn about potential security risks in modern factory automation systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk