Black Hat Courses

Intercepting iCloud Keychain

Discover critical cryptographic flaws in iCloud Keychain's end-to-end encryption, potentially allowing attackers to access plaintext secrets through man-in-the-middle attacks on iCloud communications.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Adventures in Attacking Wind Farm Control Networks

Explore vulnerabilities in wind farm control networks and potential attack scenarios, with insights on securing these critical renewable energy infrastructures.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

A Short Course in Cyber Warfare

Explore cyber warfare's complexities, including policy, strategy, and tactics. Gain insights into organizational structures and factors contributing to success in this evolving domain of conflict.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Friday the 13th - JSON Attacks

Explore JSON vulnerabilities, focusing on data libraries and serializers. Learn about attack vectors, classifications, and mitigation strategies for securing applications against JSON-based threats.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

WiFuzz - Detecting and Exploiting Logical Flaws in the Wi-Fi Cryptographic Handshake

Explore techniques for detecting and exploiting logical vulnerabilities in Wi-Fi cryptographic handshake implementations, focusing on model-based testing and real-world examples.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Evading Microsoft ATA for Active Directory Domination

Explore techniques to bypass Microsoft ATA's threat detection in Active Directory, covering reconnaissance, credential attacks, lateral movement, and persistence methods.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Exploit Kit Cornucopia

Explore creative techniques for detecting Exploit Kit infrastructure, including compromised websites, gates, and dedicated hosts, while understanding their underlying architecture.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Fad or Future - Getting Past the Bug Bounty Hype

Panel discussion on bug bounty programs: insights, challenges, and best practices from experienced program managers. Covers ROI, hunter interactions, and lessons learned for effective implementation and management.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Redesigning PKI to Solve Revocation, Expiration, and Rotation Problems

Explore PKI redesign for IoT security, addressing key revocation, expiration, and rotation challenges. Learn from real-world experiences and discover innovative solutions for robust device management.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Incident Response

Explore incident response and threat intelligence with Palo Alto Networks' SVP Wendi Whitmore, discussing cybersecurity consulting, ransomware trends, and prevention strategies.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

The State of State Machines

Explore mobile security threats, the evolving landscape, and Zero Trust principles in this insightful discussion on protecting mobile devices and data.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

Unleashing the Power of My 20+ Years Old Car

Explore automotive engine hacking, reverse engineering, and bypassing speed limiters in older vehicles. Gain insights into ECU communication, disassembly, and security vulnerabilities.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

BluePill - Neutralizing Anti-Analysis Behavior in Malware Dissection

Explore BluePill, a customizable tool for neutralizing anti-analysis techniques in malware. Learn how it defeats evasive samples and executable protectors, enhancing malware dissection capabilities.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Real Eyes, Realize, Real Lies - Beating Deception Technologies

Explore weaknesses in deception technologies, learn tactics to overcome advanced techniques, and discover a new open-source tool for red teams to avoid traps during engagements.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Mac-A-Mal - An Automated Platform for Mac Malware Hunting

Automated platform for macOS malware analysis, featuring kernel-level behavioral monitoring and extending Cuckoo sandbox capabilities. Supports various sample types and detects evasion techniques.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk