Black Hat Courses

Language Properties of Phone Scammers - Cyberdefense at the Level of the Human

Explore forensic linguistics in cybersecurity, analyzing language patterns of phone scammers to enhance human-level defense against social engineering attacks.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

The Tao of Hardware - The Te of Implants

Explore cheap hardware attacks on embedded devices and industrial control systems, including privilege escalation, kernel patching, and wireless control of PLCs. Learn about design decisions to reduce vulnerabilities.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

BadWPAD

Explores WPAD protocol vulnerabilities through experiments, revealing widespread risks in networks and DNS. Presents surprising findings and discusses implications for cybersecurity.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Hardening AWS Environments and Automating Incident Response for AWS Compromises

Learn to automate incident response in AWS, collect forensic evidence, and secure your cloud environment against API key compromises through proper configuration and monitoring.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf

Uncovers critical security flaws in Apple's ZeroConf frameworks, demonstrating vulnerabilities in Multipeer Connectivity, Bonjour, and services like AirDrop, allowing impersonation and man-in-the-middle attacks.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Horse Pill - A New Type of Linux Rootkit

Explore a novel Linux rootkit that exploits container technology, bypassing UEFI secure boot and kernel module signing. Learn about its covert capabilities and discover mitigation strategies to enhance boot security.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

An AI Approach to Malware Similarity Analysis - Mapping the Malware Genome With a Deep Neural Network

Explore AI-driven malware similarity analysis using deep neural networks for improved accuracy and adaptability in threat detection and classification.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

When Governments Attack - State Sponsored Malware Attacks Against Activists, Lawyers, and Journalists

Explores state-sponsored malware attacks targeting activists, lawyers, and journalists. Discusses technical details, presents new research, and highlights the role of security professionals in combating these threats.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

The Beast Within - Evading Dynamic Malware Analysis Using Microsoft COM

Explore COM's role in malware evasion and dynamic analysis challenges. Learn practical approaches for monitoring COM calls and overcoming obstacles in automated malware detection.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Timing Attacks Have Never Been So Practical - Advanced Cross-Site Search Attacks

Explore advanced cross-site search attacks, including browser-based and second-order techniques, to extract sensitive data from web services through timing side-channel vulnerabilities.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

DPTrace - Dual Purpose Trace for Exploitability Analysis of Program Crashes

Explore advanced crash analysis techniques combining backward and forward taint propagation to enhance exploitability assessment and speed up vulnerability triage for security researchers and exploit writers.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Using an Expanded Cyber Kill Chain Model to Increase Attack Resiliency

Explore an expanded Cyber Kill Chain model to enhance attack resiliency. Learn about internal and target manipulation kill chains, and implement controls to frustrate adversaries at each stage.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The Art of Reverse Engineering Flash Exploits

Explore advanced techniques for reverse engineering Flash exploits, including debugging tactics, memory analysis, and understanding obfuscated code. Learn to interpret exploit methods and assess mitigation strategies.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Web Application Firewalls - Analysis of Detection Logic

Explores detection logic in Web Application Firewalls, focusing on regular expressions. Analyzes security flaws in popular WAFs and introduces tools for identifying vulnerabilities in regex patterns.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Crumbling the Supercookie and Other Ways the FCC Protects Your Internet Traffic

Overview of FCC's role in protecting internet privacy and security, including enforcement actions against ISPs and proposed rules for data sharing. Explains rulemaking process and invites audience engagement.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk