Black Hat Courses

The Power of Data-Oriented Attacks - Bypassing Memory Mitigation Using Data-Only Exploitation Techniques

Explore data-oriented attacks that bypass memory mitigation techniques, focusing on exploiting vulnerabilities without altering control flow. Learn about innovative exploitation methods and their implications for cybersecurity.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Phishing for Funds - Understanding Business Email Compromise

Explore the surge in Business Email Compromise, its global impact, and strategies to protect organizations from this lucrative cybercrime targeting various market segments.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

GPU Security Exposed

Explore GPU security vulnerabilities, including shared memory risks and privilege escalation issues, with insights on protecting popular devices from potential exploits.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Beyond the Blacklists - Detecting Malicious URL Through Machine Learning

Explore machine learning techniques for detecting malicious URLs beyond traditional blacklists, focusing on HTTP-based communications and behavioral modeling for improved malware detection.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Talking Behind Your Back - Attacks and Countermeasures of Ultrasonic Cross-Device Tracking

Explore ultrasonic cross-device tracking: its marketing potential, privacy implications, and vulnerabilities. Learn about attacks, countermeasures, and the future of this emerging technology.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Code Deobfuscation - Intertwining Dynamic, Static and Symbolic Approaches

Explore advanced code deobfuscation techniques combining dynamic, static, and symbolic approaches to enhance software analysis and reverse engineering capabilities.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Attacking Windows by Windows

Explore a novel method for exploiting Windows kernel vulnerabilities across multiple OS versions, bypassing security measures to gain system privileges.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Use-After-Use-After-Free - Exploit UAF by Generating Your Own

Explore a novel exploitation technique for UAF vulnerabilities in Adobe Flash, transforming them into multi-class type confusions for full memory access despite recent mitigations.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

WiFi-Based IMSI Catcher

Explore new WiFi-based IMSI catcher techniques for tracking mobile devices, exploiting authentication protocols and discussing potential mitigations for operators and users.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

The Path Less Traveled - Abusing Kubernetes Defaults

Explore Kubernetes vulnerabilities, attack paths, and mitigations in default configurations through live demonstrations, focusing on cluster takeovers and host escapes.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Command Injection in F5 iRules

Explore command injection vulnerabilities in F5 iRules, focusing on syntax, exploitation techniques, and security implications for BigIP F5 products used in high-performance web traffic routing.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

GDPRrrrr - Using Privacy Laws to Steal Identities

Explores how GDPR's Right of Access can be exploited by social engineers to steal sensitive information, highlighting vulnerabilities in data protection laws and offering insights for businesses and legislators.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Woke Hiring Won't Save Us - An Actionable Approach to Diversity Hiring and Retention

Explore actionable strategies for improving diversity in tech beyond hiring, addressing systemic issues in education and workplace retention for underrepresented groups in STEM fields.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Denial of Service with a Fistful of Packets - Exploiting Algorithmic Complexity Vulnerabilities

Explore algorithmic complexity vulnerabilities in web servers, their impacts, and mitigation strategies. Learn how small inputs can cause significant disruptions and how to protect against these attacks.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

CQTools - The New Ultimate Hacking Toolkit

Explore top 39 hacking tools in CQTools, including 5 new ones for privilege elevation and network attacks. Learn techniques for hash extraction, impersonation, and decryption.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk