Black Hat Courses

GDPR and Third Party JS - Can It Be Done?

Explore GDPR compliance challenges for third-party JavaScript, examining privacy implications and potential solutions for data protection in web development.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Industroyer - Crashoverride - Zero Things Cool About a Threat Group Targeting the Power Grid

Análisis detallado del malware Industroyer utilizado en el ciberataque a la red eléctrica de Ucrania en 2016, sus capacidades y el grupo de amenazas detrás del ataque.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The UEFI Firmware Rootkits - Myths and Reality

Explore UEFI firmware security, vulnerabilities, and real-world applicability of attacks. Analyze rootkit scenarios and assess practical implications for system compromise at privileged levels.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Techniques to Gather Threat Intel and Track Actors

Discover 24 techniques for gathering threat intelligence and tracking actors, illustrated with 30 real-world cases. Learn about crimeware vulnerabilities, C&C misconfigurations, and underground marketplaces.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Go Get My - Vulnerabilities - An In-Depth Analysis of Go Language Runtime and the New Class of Vulnerabilities It Introduces

Explore Go language runtime vulnerabilities, their impact on applications, and potential security risks in this in-depth analysis of Golang's growing adoption across various programming domains.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Real-World Post-Quantum Cryptography - Introducing the OpenQuantumSafe Software Project

Explore OpenQuantumSafe, an open-source library for quantum-safe cryptography, including implementations, benchmarks, integration challenges, and future developments.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Hello From the Other Side - SSH Over Robust Cache Covert Channels in the Cloud

Explore practical cache covert channels in cloud environments for secret data exfiltration between isolated virtual machines, presented by security researchers at Black Hat Asia.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Testing Vehicles with CANToolz

Explore CANToolz framework for CAN bus analysis, featuring black-box testing of automotive networks and ECUs. Learn practical use-cases for vehicle security research and penetration testing.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Bypassing Secure Boot Using Fault Injection

Explore fault injection techniques to bypass Secure Boot in embedded systems, focusing on hardware-based attacks when logical vulnerabilities are absent.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Mobile Espionage in the Wild - Pegasus and Nation-State Level Attacks

Explore Pegasus, a sophisticated mobile espionage tool, its technical capabilities, and real-world impact. Learn about infrastructure tracking and malware detection in high-profile attacks.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Effective File Format Fuzzing – Thoughts, Techniques and Results

Explore advanced file format fuzzing techniques for vulnerability hunting, including setup, scalability, and achieving optimal results against modern software.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Breaking Big Data - Evading Analysis of the Metadata of Your Life

Explore techniques to protect your digital privacy and evade metadata analysis in an era of pervasive surveillance by governments and corporations.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Blue to Red - Traversing the Spectrum

Explore the importance of foundational security skills and an adversarial mindset in navigating diverse InfoSec roles, from forensics to red teaming, in this insightful keynote by Amanda Rousseau.

• YouTube
• 1 hour 27 minutes
• Self-Paced
• Conference Talk

Breaking Encrypted Databases - Generic Attacks on Range Queries

Explore generic attacks on encrypted databases supporting range queries, focusing on common building blocks and latest solutions in commercial and academic settings.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

How Do Cyber Insurers View The World

Insider perspective on cyber insurance: company assessments, pricing, claims, and industry evolution. Gain insights into how insurers evaluate and manage cyber risks.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk