Black Hat Courses

The Future of ApplePwn - How to Save Your Money

Explore open-source tools demonstrating vulnerabilities in Apple Pay, including methods for unauthorized transactions and card reconnection, even on non-jailbroken devices.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Breaking Korea Transit Card with Side-Channel Attack - Unauthorized Recharging

Unveiling vulnerabilities in Korea's transit card system through side-channel attacks, demonstrating potential financial risks and the need for enhanced smartcard security measures.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Inside Web Attacks - The Real Payloads

Explore real-world payloads used by attackers exploiting major vulnerabilities, based on CloudFlare's unique insights from protecting millions of websites.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Driving Cyber Resiliency of IoT Devices with Active Management and Cyber Hygiene

Explore IoT device security challenges, cyber hygiene importance, and active management strategies. Gain insights from HP's framework for print security assessments and industry best practices.

• YouTube
• 12 minutes
• Self-Paced
• Conference Talk

Your Guide to An Integrated Threat Intelligence Strategy

Discover how to implement a holistic, integrated threat intelligence approach that combines cultural shifts and technological enhancements for proactive cybersecurity.

• YouTube
• 10 minutes
• Self-Paced
• Conference Talk

Securing Your Business Starts With The Basics

Learn essential cybersecurity strategies from AlienVault's CTO. Discover the importance of mastering security basics, effective breach detection, and data sharing for improved threat response across organizations.

• YouTube
• 11 minutes
• Self-Paced
• Conference Talk

Samsung Pay - Tokenized Numbers Flaws and Issues

Análisis de vulnerabilidades en la generación de tokens de Samsung Pay, explorando posibles fallos de seguridad y riesgos para los usuarios.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

O-Checker - Detection of Malicious Documents Through Deviation From File Format Specifications

Explores detection of malicious documents by identifying deviations from file format specifications, focusing on targeted email attacks in Japan and introducing the o-checker tool for high detection rates.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Incident Response at Scale - Building a Next Generation SOC

Explore strategies for automating incident response processes in large-scale environments to improve efficiency, visibility, and organizational protection.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Android Kernel and OS Security Assessment with Iron Crow

Discover Iron Crow: a powerful tool for Android BSP developers and OEMs to detect platform-level vulnerabilities, enhancing security and protecting end users from potential exploits in customized Android environments.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Counterfeiting the Pipes with FakeNet 2.0 - Part 2

Learn to simulate networks for malware analysis using FakeNet 2.0. Capture network signatures, mimic protocols, and defeat malware through hands-on challenges with real-world samples.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Sidewinder Targeted Attack Against Android in the Golden Age of Ad Libs

Explores vulnerabilities in Android apps and ad libraries, demonstrating a targeted attack method that exploits location data and system weaknesses to compromise user privacy and device security.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Detecting Vulnerabilities in Virtual Devices with Conformance Testing

Explore techniques for detecting vulnerabilities in virtual devices using conformance testing, enhancing security in virtualized environments.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Shattering Illusions in Lock-Free Worlds - Compiler - Hardware Behaviors in OSes - VMs

Explores memory access issues in multi-threaded environments, focusing on compiler/hardware behaviors that can lead to security vulnerabilities in OSes, VMs, and applications.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Phoenix Domain Attack - Vulnerable Links in Domain Name Delegation and Revocation

Explore a novel DNS attack allowing adversaries to maintain revoked malicious domains, affecting mainstream DNS software and public resolvers. Learn about vulnerabilities in domain name delegation processes.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk