Black Hat Courses

TCP Injection Attacks in the Wild - A Large Scale Study

Comprehensive survey of TCP injection attacks, revealing commercial and non-commercial false content injections on the web. Explores detection methods, identifies injectors, and proposes client-side mitigation techniques.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Windows 10 Segment Heap Internals

Explore Windows 10 Segment Heap internals, focusing on data structures, algorithms, and security mechanisms. Learn how to exploit memory corruption vulnerabilities in Microsoft Edge components.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

The Remote Malicious Butler Did It!

Explore remote exploitation of unattended computers using rogue Domain Controllers. Learn technical details, attack vectors, and prevention methods for enterprise security.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Ouroboros - Tearing Xen Hypervisor With the Snake

Explore a critical verification bypass bug in Xen hypervisor, allowing malicious PV guest OS to control the hypervisor and other guest operating systems. Learn about exploitation vectors and payloads.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Defense at Hyperscale - Technologies and Policies for a Defensible Cyberspace

Explore strategies for achieving defensible cyberspace through innovative technologies, operational improvements, and public policies that provide cost-effective security at scale.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

What's the DFIRence for ICS?

Explore digital forensics for industrial control systems, focusing on embedded devices in critical infrastructure. Learn data collection and analysis techniques for RTUs in electric substations.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Pindemonium - A DBI-Based Generic Unpacker for Windows Executable

Explore a generic unpacking algorithm for Windows executables using Dynamic Binary Instrumentation. Learn to detect and defeat popular packing techniques, reconstruct working PEs, and handle IAT obfuscation.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Keystone Engine - Next Generation Assembler Framework

Explore Keystone, a multi-architecture assembler engine with clean API, native support for various platforms, and bindings for multiple programming languages. Ideal for reverse engineering and security research.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Dungeons Dragons and Security

Innovative security training using role-playing game to teach basic principles through building attack/defense scenarios. Engages neophytes by drawing parallels between game and real-world security challenges.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Dark Side of the DNS Force

Explore the evolution of DNS-based attacks, including random subdomain techniques, and learn about detection and mitigation strategies for protecting against these sophisticated cyber threats.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Watching Commodity Malware Get Sold to a Targeted Actor

Explore how commodity malware breaches are reclassified and upgraded for targeted attacks, and learn detection techniques to prevent threat escalation in organizational networks.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Blunting the Phisher's Spear - A Risk-Based Approach

Explore a risk-based approach to combat spear phishing, introducing the Cyber Risk Index for personalized training and access management to enhance organizational cybersecurity.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

BadTunnel - How Do I Get Big Brother Power?

Discover a critical Windows flaw affecting multiple systems and applications. Learn about its wide-ranging impact and how to defend against this pervasive threat, even on unsupported systems.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Next-Generation of Exploit Kit Detection by Building Simulated Obfuscators

Learn techniques for detecting next-gen exploit kits by simulating obfuscators. Explore implementation, evaluation, and evolution of obfuscators for 6 notorious exploit kit families to enhance cybersecurity protection.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Investigating DDOS - Architecture, Actors, and Attribution

Explore DDOS attacks, their evolution, and novel techniques for measuring, studying, and attributing them. Learn about honeypots, attack testing, and the individuals behind these cyber threats.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk