Black Hat Courses

Practical HTTP Header Smuggling - Sneaking Past Reverse Proxies to Attack AWS and Beyond

Explore HTTP header smuggling techniques to bypass security measures, attack web applications, and exploit vulnerabilities in proxy servers and AWS services.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Certified Pre-Owned - Abusing Active Directory Certificate Services

Explore AD CS vulnerabilities for credential theft, persistence, and domain escalation. Learn offensive and defensive techniques to secure Active Directory PKI implementations.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Bypassing Windows Hello for Business and Pleasure

Explore vulnerabilities in Windows Hello's face recognition, demonstrating how attackers can bypass this passwordless authentication using a crafted USB device.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms

Explore novel DNS vulnerabilities affecting major cloud providers, their impact on corporate networks, and potential information leakage. Learn about root causes, exploitation methods, and mitigation strategies.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Bridging Security Infrastructure Between the Data Center and AWS Lambda

Explore secure integration of serverless technology with data center services, focusing on workload identity in AWS Lambda and bridging identity between on-premises and cloud environments.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Breaking Secure Bootloaders

Explore techniques to bypass secure bootloaders, including signature verification vulnerabilities, memory analysis, and firmware update exploits. Learn to identify and exploit weaknesses in modern device protection mechanisms.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Cloudy with a Chance of APT - Novel Microsoft 365 Attacks in the Wild

Explore novel APT techniques targeting Microsoft 365, including persistent access methods and data extraction. Learn technical details, potential extensions, and prepare for emerging threats.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

A Broken Chain - Discovering OPC UA Attack Surface and Exploiting the Supply Chain

Explore OPC-UA protocol vulnerabilities and potential cyberattack vectors in industrial communication systems. Learn about attack surfaces, exploitation techniques, and security implications for Industry 4.0 environments.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Can You Roll Your Own SIEM

Explore building a custom cloud-native SIEM solution, discussing considerations, requirements, and benefits compared to vendor options. Learn about cost savings and improved capabilities.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

5G IMSI Catchers Mirage

Investigates 5G security mechanisms against IMSI catchers, exploring vulnerabilities and protection techniques through practical experiments with commercial devices.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Electromagnetic Fault Injection & Automotive Systems

Explore electromagnetic fault injection to bypass security in automotive ECUs, demonstrating potential vulnerabilities in modern vehicle systems through practical examples and live demonstrations.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Embedding a Human-Centric Approach Into a Global Cyber Security Program

Explore a human-centric approach to cybersecurity, challenging traditional views and examining how Airbus integrates this perspective into their global program for enhanced protection.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Come to the Dark Side, We Have Apples - Turning macOS Management Evil

Explore advanced offensive techniques for exploiting macOS management platforms, including MDM and Jamf, to gain unauthorized access and control over enterprise systems.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Hacking a Capsule Hotel - Ghost in the Bedrooms

Explore IoT vulnerabilities in capsule hotels, revealing how six exploits can be combined to control bedrooms and potentially disrupt noisy neighbors.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Deepfake Social Engineering - Creating a Framework for Synthetic Media Social Engineering

Explore the risks of deepfake technology in social engineering, learn about a new framework for understanding these attacks, and discover practical countermeasures to protect against synthetic media threats.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk