Black Hat Courses

A Deal with the Devil - Breaking Smart Contracts

Explore tools and practices for identifying vulnerabilities in smart contracts, presented by security consultants with real-world experience in contract development.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Death Profile - Now iOS Has Been Compromised to Suspected Ransomware

Uncover the hunt for remote iOS ransomware attacks using profile installation. Learn how these "death profiles" hijack screens and crash systems, and explore techniques to defeat this emerging threat.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Back to the Epilogue - How to Evade Windows' Control Flow Guard with Less than 16 Bytes

Discover a novel attack against Windows CFG, enabling arbitrary code execution by evading integrity checks. Learn about the design vulnerability, attack construction, and potential impact.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Becoming You - A Glimpse Into Credential Abuse

Explore CDN-based techniques for detecting and mitigating credential abuse vulnerabilities, enhancing security protection during request flow without relying solely on origin servers.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Heap Layout Optimisation for Exploitation

Automatic approach to heap layout optimisation for exploitation using pseudo-random search over allocator interactions, with applications to real-world programs and vulnerability targeting.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

A Universal Controller to Take Over a Z-Wave Network

Explore Z-Wave network vulnerabilities using auto-discovery and backup/restore features, demonstrating potential security risks in smart home systems.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

How Samsung Secures Your Wallet and How to Break It

Demystifying SamsungPay's implementation and security mechanisms, with insights on bypassing analysis obstacles. Explore the intricacies of this mobile payment service's architecture and potential vulnerabilities.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Breaking Out HSTS and HPKP on Firefox, IE - Edge and - Possibly - Chrome

Explore vulnerabilities in HSTS implementation across major browsers, focusing on undocumented aspects and potential security risks in Firefox, IE/Edge, and Chrome.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Fed Up Getting Shattered and Log Jammed - A New Generation of Crypto Is Coming

Explore SHA-3 and SHAKE algorithms, their applications in cryptographic protocols, and the evolution of secure communication methods in this comprehensive technical overview.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Enraptured Minds - Strategic Gaming of Cognitive Mindhacks

Explore tools and methods for public mind manipulation, examining historical research and analyzing Twitter posts to reveal how malefactors exploit social events to promote their agendas.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Rootten Apples - Vulnerability Heaven in the iOS Sandbox

Explore critical iOS kernel vulnerabilities, privilege escalation techniques, and mitigation bypasses in this in-depth analysis of unexplored areas affecting millions of devices.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Cyber Comrades - Alliance-Building in Cyberspace

Explore cyber diplomacy, international partnerships, and the evolving landscape of cybersecurity in a globalized world. Learn strategies for alliance-building and advancing cooperation in cyberspace.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Jailbreaking Apple Watch

Explore the first public Apple Watch jailbreak, delving into watchOS internals and security aspects for iOS-based devices.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

I Trust My Zombies - A Trust-Enabled Botnet

Explore trust-enabled botnets and defense strategies in this talk on P2P botnet resilience, monitoring techniques, and the Sality botnet, with insights on crawler and sensor effectiveness.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Exposing Hidden Exploitable Behaviors in Programming Languages Using Differential Fuzzing

Uncover hidden vulnerabilities in programming languages through differential fuzzing. Learn to identify undocumented functions, exposed sensitive data, unexpected code execution, and potential security risks.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk