Black Hat Courses

TLBleed - When Protecting Your CPU Caches is Not Enough

Explore TLBleed, a novel side-channel attack leaking information from Translation Lookaside Buffers, demonstrating vulnerabilities beyond CPU caches and challenging current security measures.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Exploitation of a Modern Smartphone Baseband

Explore smartphone baseband security, learn to find and exploit memory corruption bugs in modern devices. Gain insights into design, countermeasures, and practical hacking techniques.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Drill Apple Core - Up and Down - Fuzz Apple Core Component in Kernel and User Mode for Fun and Profit

Explore kernel sanitizers, XNU syscall API patterns, and code coverage techniques for Apple systems. Live demo of macOS root access using 0-day vulnerabilities discovered through fuzzing.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Windows Offender - Reverse Engineering Windows Defender's Antivirus Emulator

Dive into the internals of Windows Defender's antivirus emulator, exploring its binary analysis techniques for potentially malicious PE files. Gain unique insights into reverse engineering antivirus systems.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Wrangling with the Ghost - An Inside Story of Mitigating Speculative Execution Side Channel Vulnerabilities

Explore Microsoft's approach to mitigating speculative execution vulnerabilities, including research, collaboration, and industry-wide efforts. Learn about Spectre, Meltdown, and strategies for robust security measures.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Follow the White Rabbit - Simplifying Fuzz Testing Using FuzzExMachina

Explore FuzzExMachina, a framework for efficient fuzz testing. Learn how it uncovered 11 crashes and 6 exploitable vulnerabilities in Arch Linux packages, simplifying security analysis.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Another Flip in the Row

Explore the Rowhammer bug in DRAM modules, its security implications, exploitation techniques, and potential mitigations in this comprehensive overview of hardware vulnerabilities.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Playback - A TLS 1.3 Story

Explore TLS 1.3's 0-RTT feature, its risks, and real-world replay attacks. Learn about potential solutions and mitigation controls for secure deployment of TLS 1.3-supported software.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems

Explore security vulnerabilities in mobile payment systems, focusing on economic implications, fraud risks, and outdated card standards. Learn about testing methods and potential attack vectors.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

It's a PHP Unserialization Vulnerability Jim, but Not as We Know It

Explore PHP unserialization vulnerabilities, including RCE exploits in popular web applications. Learn attack methodologies, file formats, and defense strategies.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

An Attacker Looks at Docker - Approaching Multi-Container Applications

Explore containerization's impact on offensive security operations, focusing on Docker's implications for penetration testing and multi-container application vulnerabilities.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

How Can Someone with Autism Specifically Enhance the Cyber Security Workforce

Explore unique skills individuals with Autism Spectrum Disorder bring to cybersecurity, enhancing workforce diversity and effectiveness in addressing complex security challenges.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Over-the-Air - How We Remotely Compromised the Gateway, BCM, and Autopilot ECUs of Tesla Cars

Detailing Tesla car hacking techniques, including remote compromises of gateway, BCM, and Autopilot ECUs. Explores vulnerabilities, attack chains, and Tesla's security enhancements in response.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Last Call for SATCOM Security

Explore vulnerabilities in satellite communication systems, including potential cyber-physical attacks on maritime, aviation, and military sectors. Learn about security flaws and their real-world implications.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

DeepLocker - Concealing Targeted Attacks with AI Locksmithing

DeepLocker: AI-powered targeted attacks using deep neural networks for evasive malware. Explores mechanisms, implications, and defenses against AI-weaponized cybercrime.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk