Black Hat Courses

Rogue7 - Rogue Engineering-Station Attacks on S7 Simatic PLCs

Uncovers vulnerabilities in Siemens S7 PLC systems, demonstrating potential attacks on industrial control architectures despite claimed security measures and advanced cryptographic protocols.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Flying a False Flag - Advanced C2, Trust Conflicts, and Domain Takeover

Explore advanced command and control techniques, trust exploitation, and domain takeover in cloud environments. Learn about stealthy methods and new tooling for AWS, Azure, and GCP.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Every Security Team is a Software Team Now

Exploring how cybersecurity practices evolve as companies become software-driven. Discusses cultural shifts in software engineering and their impact on security, emphasizing the need for integrated, cross-functional approaches.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

The Next Arms Race

Explore the emerging cyber arms race as countries develop new offensive weapons for the Internet, challenging the notion of a borderless digital world.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

BLEEDINGBIT - Your APs Belong to Us

Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

SirenJack - Cracking a 'Secure' Emergency Warning Siren System

Uncover the SirenJack vulnerability affecting emergency warning systems, exploring how a simple setup can compromise critical infrastructure and discussing potential security implications.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Ghost Telephonist Link Hijack Exploitations in 4G LTE CS Fallback

Uncover a critical 4G LTE vulnerability allowing attackers to hijack calls and SMS. Learn about the 'Ghost Telephonist' attack and its implications for mobile network security.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Sonic Gun to Smart Devices - Your Devices Lose Control Under Ultrasound - Sound

Explore how acoustic waves can exploit vulnerabilities in MEMS sensors, causing smart devices to lose control and yield spoiled data.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

IoTCandyJar - Towards an Intelligent-Interaction Honeypot for IoT Devices

Explore innovative honeypot adaptation for IoT security, addressing unique challenges and proposing intelligent interaction solutions to enhance protection of networked embedded devices.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

The Adventures of AV and the Leaky Sandbox

Explore a novel data exfiltration technique exploiting cloud-enhanced antivirus sandboxes in highly secure enterprises, demonstrating vulnerabilities in seemingly protected systems.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Bug Collisions Meet Government Vulnerability Disclosure

Explore the Vulnerability Equities Process and its impact on software vulnerability disclosure, examining the likelihood of multiple parties discovering the same security flaws.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

KR^X - Comprehensive Kernel Protection Against Just-In-Time Code Reuse

Explore comprehensive kernel protection against just-in-time code reuse attacks, focusing on memory corruption vulnerabilities and hardening techniques to prevent privilege escalation in kernel code.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Big Game Theory Hunting - The Peculiarities of Human Behavior in the InfoSec Game

Explore behavioral game theory in cybersecurity, examining human decision-making and its impact on defense strategies. Learn how empirical observations challenge traditional assumptions about rational behavior in InfoSec.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

National Cyber-Aggression and Private-Sector Internet Infrastructure

Exploring nation-state cyber-attacks on private Internet infrastructure, misaligned military incentives, and economic impacts. Discusses past efforts and current initiatives to address these challenges.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Hacking Serverless Runtimes - Profiling AWS Lambda, Azure Functions & More

Explore techniques for auditing and defending serverless runtimes, focusing on AWS Lambda and Azure Functions, to enhance security in micro-service architectures.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk