Black Hat Courses

Does Dropping USB Drives in Parking Lots and Other Places Really Work?

Explores the effectiveness of USB drive-based attacks through a campus experiment, revealing high success rates and analyzing factors influencing user behavior. Discusses mitigation strategies and demonstrates new tools.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Secure Penetration Testing Operations - Demonstrated Weaknesses in Learning Material and Tools

Explores vulnerabilities in penetration testing practices, demonstrating weaknesses in learning materials and tools. Provides guidance on securing testing procedures and includes a live demonstration of hijacking techniques.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Using EMET to Disable EMET

Explore techniques to bypass EMET's security mitigations, including targeted evasion methods and generic disabling approaches applicable to various endpoint protection products.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Brute-Forcing Lockdown Harddrive Pin Codes

Explore techniques for bypassing AES-256 encrypted hard drive security through front-panel keyboard spoofing and internal design analysis, building on previous research.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Building a Product Security Incident Response Team - Learnings From the Hivemind

Building a Product Security Incident Response Team: Best practices, templates, and actionable recommendations for small to medium companies to establish effective PSIRT processes and respond to vulnerability reports.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Side-Channel Attacks on Everyday Applications

Explore FLUSH+RELOAD side-channel attacks beyond cryptography, demonstrating their potential to leak information from everyday applications like web browsers and text editors.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Unleash the Infection Monkey - A Modern Alternative to Pen-Tests

Explore a new open-source tool for testing network security resilience. Learn how the Infection Monkey simulates attacks, uncovers vulnerabilities, and provides a cost-effective alternative to traditional penetration testing methods.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Security Through Design - Making Security Better by Designing for People

Explore user-centered design methods to create more effective and user-friendly security processes, tools, and communication strategies, improving corporate productivity and security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Demystifying the Secure Enclave Processor

Explore Apple's Secure Enclave Processor: its hardware design, SEPOS architecture, data exchange mechanisms, and potential vulnerabilities in this in-depth technical analysis.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Hacking Next-Gen ATMs - From Capture to Cashout

Explore advanced ATM hacking techniques, including bypassing anti-skimming methods, NFC long-range attacks, and automated cash-out systems. Learn about vulnerabilities in EMV implementations and future credit card data risks.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Understanding HL7 2.X Standards - Pen Testing - and Defending HL7 2.X Messages

Explore HL7 2.X standards in healthcare, learn pen testing techniques for medical systems, and discover strategies to secure HL7 2.X messages against potential vulnerabilities and attacks.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Analysis of the Attack Surface of Windows 10 Virtualization-Based Security

Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Cunning With CNG - Soliciting Secrets From Schannel

Explore Schannel's internal security, CNG key caching, and forensic implications. Learn to extract and leverage TLS/SSL connection data for decryption and analysis of ephemeral key exchanges.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

The Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android

Explore Android's evolving security landscape, examining threats, vulnerabilities, and defensive measures. Learn how the Android Security Team addresses challenges and implements new features to protect users.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Advanced CAN Injection Techniques for Vehicle Networks

Explore advanced techniques for injecting CAN messages into vehicle networks, bypassing restrictions on physical control systems like brakes, steering, and acceleration.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk