Black Hat Courses

Augmenting Static Analysis Using Pintool - Ablation

Extracts runtime information to enhance static analysis, resolving virtual calls in C++ binaries and visually comparing samples for efficient vulnerability research and code auditing.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Abusing Bleeding Edge Web Standards for Appsec Glory

Explore risks and mitigation strategies for modern web security standards like SRI, CSP, and HPKP. Learn about implementation challenges, trade-offs, and potential exploits in legacy applications.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

A Retrospective on the Use of Export Cryptography

Explores vulnerabilities in TLS due to export-grade cryptography, examining FREAK, Logjam, and Drown attacks, their impact, and lessons for future cryptographic protocol design and implementation.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Measuring Adversary Costs to Exploit Commercial Software

Quantitative analysis of software security across platforms, revealing surprising insights for informed decision-making in product selection and vulnerability assessment.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Hackproofing Oracle EBusiness Suite

Explore vulnerabilities in Oracle eBusiness Suite and learn effective strategies to secure systems against potential attacks, including remote code execution and SQL injection.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Memory Forensics Using Virtual Machine Introspection for Cloud Computing

Explore memory forensics in cloud environments using virtual machine introspection. Learn techniques for trustworthy data collection without system interference, ideal for digital forensics in virtualized settings.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Nonce-Disrespecting Adversaries - Practical Forgery Attacks on GCM in TLS

Explore nonce-reuse vulnerabilities in GCM encryption for TLS, including Internet-wide scans, proof-of-concept attacks, and implications for HTTPS security.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Subverting Apple Graphics - Practical Approaches to Remotely Gaining Root

Explore techniques for subverting Apple graphics to gain root access remotely. Learn about vulnerabilities in userland and kernel components, and practical exploitation methods for both OS X and iOS systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Adaptive Kernel Live Patching - An Open Collaborative Effort

Innovative framework for adaptive Android kernel live patching, enabling open and collaborative efforts to address vulnerabilities quickly without interrupting user experience or requiring source code access.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

CANSPY - A Platform for Auditing CAN Devices

Explore CANSPY, a platform for auditing CAN devices in vehicles. Learn to intercept, modify, and analyze CAN frames for security testing of automotive systems and connected devices.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Breaking Kernel Address Space Layout Randomization - KASLR - With Intel TSX

Explore a novel timing side-channel attack against KASLR using Intel TSX, demonstrating its effectiveness in de-randomizing kernel memory layout across major operating systems.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Pwning Your Java Messaging With Deserialization Vulnerabilities

Explore Java messaging vulnerabilities, focusing on deserialization issues in popular message brokers. Learn to identify and exploit these weaknesses using the Java Messaging Exploitation Tool.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

GreatFET - Making GoodFET Great Again

GreatFET: An improved open-source hardware hacking tool with enhanced features, better maintainability, and cost-effective manufacturing, replacing the popular GoodFET project.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Design Approaches for Security Automation

Explore criteria for designing and evaluating security automation tools, from small-scale techniques to large-scale implementations, to effectively secure organizational environments.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Into the Core - In-Depth Exploration of Windows 10 IoT Core

Explore Windows 10 IoT Core internals, security features, attack surfaces, and assessment methods. Learn to secure IoT devices and understand their role in the evolving Internet of Things landscape.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk