Black Hat Courses

Reconstruct the World from Vanished Shadow - Recovering Deleted VSS Snapshots

Explore techniques for recovering deleted VSS snapshots in Windows, crucial for computer forensics and file restoration. Learn about snapshot management, data structures, and practical demonstrations.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Kernel Mode Threats and Practical Defenses

Explore advanced kernel mode threats, Microsoft's defenses, and practical strategies for detecting and mitigating sophisticated attacks on Windows operating systems.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Breaking the IIoT - Hacking Industrial Control Gateways

Comprehensive exploration of security vulnerabilities in industrial control gateways, from protocol attacks to firmware reverse engineering, with live demonstrations on real devices.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

AI & ML in Cyber Security - Why Algorithms Are Dangerous

Explore limitations of machine learning in cybersecurity, dangers of blind algorithm application, and alternative approaches like probabilistic inference for more effective threat detection and analysis.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Identity Theft - Attacks on SSO Systems

Explore vulnerabilities in SAML-based SSO systems, focusing on XML signature attacks. Learn about potential exploits, threat models, and remediation strategies for securing identity management.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Windows Notification Facility - Peeling the Onion of the Most Undocumented Kernel Attack Surface Yet

Explore the undocumented Windows Notification Facility, its architecture, and potential security implications. Learn about state names, data publishing, and consuming, as well as attack vectors and defensive strategies.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

A Dive into Hyper-V Architecture and Vulnerabilities

Explore Hyper-V architecture, vulnerabilities, and security implications in virtualization technology. Gain insights into guest-to-host exploits and platform security challenges.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Running a Security Operations Center - Challenges, Solutions and Key Learnings

Explore challenges and solutions in operationalizing a Security Operations Center, covering threat hunting, behavioral analytics, and rapid product deployment for enhanced cybersecurity.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Meltdown - Basics, Details, Consequences

Explore Meltdown, a critical security vulnerability that breaks fundamental isolation between user applications and operating systems, allowing unauthorized access to system memory and sensitive data.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Attacking Client-Side JIT Compilers

Explore JIT compiler security in JavaScript engines, focusing on challenges, solutions, and potential vulnerabilities. Learn about optimization techniques and their impact on browser exploitation.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Screaming Channels - When Electromagnetic Side Channels Meet Radio Transceivers

Novel side-channel attacks on mixed-design chips exploiting electromagnetic leaks in radio signals, potentially breaking cryptography over large distances. Explores discovery, impact, and countermeasures.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

XOM-Switch - Hiding Your Code from Advanced Code Reuse Attacks in One Shot

Discover XOM-switch, a security tool enabling XOM on Linux applications using PKU. Learn about its end-to-end approach for protecting deployed apps without source code or heavy binary rewriting.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages

Explore a new SSRF exploit technique targeting URL parsers in popular programming languages. Learn about protocol smuggling, fuzzing tools, and discover vulnerabilities in widely-used libraries.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Analyzing & Breaking QNX Exploit Mitigations and PRNGs for Embedded Systems

Dissection of QNX's security features, including exploit mitigations and random number generators, for embedded systems in automotive, industrial, defense, and medical sectors.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Securing Your In-Ear Fitness Coach - Challenges in Hardening Next Generation Wearables

Explore security challenges and solutions for next-gen wearables, focusing on a custom Security Development Lifecycle for hardware, software, and cloud components in IoT ecosystems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk