Black Hat Courses

Don't @ Me - Hunting Twitter Bots at Scale

Explore the Twitter bot economy and learn a three-step methodology to track down bots: dataset building, attribute identification, and classifier development for accurate large-scale detection.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

A Brief History of Mitigation - The Path to EL1 in iOS 11

Explore the async_wake exploit for iOS 11.1.2, examining each step and the mitigations overcome. Gain insights into iOS security vulnerabilities and exploitation techniques.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Attacks on the Curl-P Hash Function Leading to Signature Forgeries in the IOTA Signature Scheme

Análisis de vulnerabilidades en la función hash Curl-P de IOTA, revelando debilidades criptográficas que permiten falsificar firmas digitales en esta criptomoneda de alto perfil para el Internet de las Cosas.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Enhancing Cybersecurity Through Differentiated Access to Domain Name Registration Data

Explore new technology bridging privacy and access gaps in domain name registration data, enhancing cybersecurity through differentiated access and automated systems.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

From Bot to Robot - How Abilities and Law Change with Physicality

Explore the evolving landscape of bots and robots, their impact on society, and the legal implications as they transition from digital to physical realms.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

The Unbearable Lightness of BMC's

Explore vulnerabilities in data center Baseboard Management Controllers (BMCs), uncovering potential security risks and their implications for critical infrastructure.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths

Explore Ethereum smart contract vulnerabilities, reverse engineering techniques, and new tools for analyzing blockchain attacks through real-world examples and practical demonstrations.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

There Will Be Glitches - Extracting and Analyzing Automotive Firmware Efficiently

Explore automotive firmware extraction and analysis techniques, focusing on fault injection and emulation for uncovering vulnerabilities in vehicle security systems.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Compression Oracle Attacks on VPN Networks

Explore compression oracle attacks on VPN networks, including browser requests and ESP compression. Learn detection methods, setup requirements, and potential future threats.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

No Royal Road - Notes on Dangerous Game

Explores attribution fatigue in cybersecurity, examining nation-state hacking, stolen toolchains, and the evolution of cyber threats beyond espionage into active operations.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Remotely Attacking System Firmware

Explore remote attack vectors targeting system firmware, including networking and updates. Learn about exploiting UEFI vulnerabilities for installing persistent implants at scale.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Holding on for Tonight - Addiction in InfoSec

Explore the connection between stress, addiction, and relapse in InfoSec, with personal insights on alcohol use disorder and tips for fostering inclusive, supportive work environments.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Great Algorithms Do Not Always Make Great Products

Explore how to create engaging digital security solutions that generate real business outcomes and reduce enterprise risk, beyond just focusing on algorithms.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Finding Xori - Malware Analysis Triage with Automated Disassembly

Explore automated malware analysis using Xori, an open-source disassembler. Learn to identify suspicious functionality and contribute to this valuable cybersecurity tool.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

How I Learned to Stop Worrying and Love the SBOM

Explore the potential of Software Bill of Materials (SBOM) to revolutionize information security, addressing industry resistance and highlighting its benefits for transparency and enterprise value.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk