Black Hat Courses

Exploring How Memory-Mapped Files Hide From AV and Execute Malicious Code

Explore techniques for using memory-mapped files to conceal malicious payloads and execute code, evading antivirus detection.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Reversing a Japanese Wireless SD Card - From Zero to Code Execution

Discover how to reverse engineer a wireless SD card's firmware using open-source tools, uncovering its architecture and operating system to achieve code execution.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Edge Side Include Injection - Abusing Caching Servers into SSRF and Transparent Session Hijacking

Explore Edge Side Include injection, a web attack vector exploiting caching servers. Learn how this legacy technology can lead to SSRF and session hijacking vulnerabilities in modern web infrastructure.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Measuring the Speed of the Red Queen's Race - Adaption and Evasion in Malware

Explore the dynamic evolution of malware and security measures using machine learning to quantify adaptation rates in the ongoing cybersecurity arms race.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Miasm - Reverse Engineering Framework

Explore Miasm's reverse engineering capabilities, from basic framework to symbolic emulation and malware analysis tools. Learn disassembly, code emulation, and advanced techniques for tackling complex software.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Those Don't Matter! Effective Prioritization Through Exploit Prediction

Discover a machine learning classifier for data-driven vulnerability prioritization, enhancing risk management strategies and improving decision-making in cybersecurity.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

iOS Jailbreak Internals - Userland Read-Only Memory Can Be Dangerous

Explora las vulnerabilidades en la memoria de solo lectura de iOS, analizando ataques DMA y explotando fallas en IOSurfaceAccelerator para lograr ejecución de código arbitrario y jailbreak.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

A Hacker's Guide to Career Progression

Explore hacking career progression strategies, from risk-taking to problem-solving, mentorship, and giving back. Learn to navigate your journey based on technical preferences and salary aspirations.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Detecting Credential Compromise in AWS

Learn techniques to detect and mitigate credential compromise in AWS, a widespread concern for cloud-based companies. Explore various attacker motives and outcomes.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Qualitative Look at Autonomous Peer Communication's Impact on Organizational Phishing Detection

Explore how autonomous peer communication enhances organizational phishing detection through user education and marketing tools in information security awareness programs.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Why the World Must Take Notice of the Rising Asian Dark Web

Explore the rising Asian dark web markets, their usage patterns, and user motivations. Gain insights into new research findings across various Asian countries' dark web landscapes.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Finding Xori - Malware Analysis Triage with Automated Disassembly

Explore automated malware analysis using Xori, an open-source tool for efficient triage and disassembly. Learn to process high volumes of malware and improve analysis capabilities at scale.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Dissecting Non-Malicious Artifacts - One IP at a Time

Uncover the risks of security product interactions with online scanners, exploring information leaks, zero detection issues, and practical examples for improved cybersecurity.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Stress and Hacking - Understanding Cognitive Stress in Tactical Cyber Ops

Explore cognitive stress in cyber operations, its impact on performance, and strategies to manage it. Learn about human factors in high-stakes hacking environments and their implications.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Legal Landmines - How Law and Policy are Rapidly Shaping Information Security

Explore how evolving laws and policies are reshaping information security in the digital age, examining key legal challenges and their impact on technology and data protection.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk