Black Hat Courses

Inside the Ransomware Machine

Discover the inner workings of the ransomware economy through leaked data analysis and learn what drives these criminal enterprises and potential solutions to stop them.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

From Script Kiddie to Cyber Kingpin - Preventing the Predictable Progression

Explore the dark evolution from teenage hacking to serious cybercrime through the shocking Vastaamo case and learn how to break the cycle of predictable criminal progression.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Who Gets to Point Fingers? Technical Capacity and International Accountability

Explore how Global South nations challenge Western-centric cyber attribution assumptions and develop alternative approaches to international accountability in cyberspace.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Back to the Future - Hacking and Securing Connection-based OAuth Architectures

Uncover critical vulnerabilities in connection-based OAuth architectures used by AI agents and integration platforms, with practical exploits and security best practices.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

AppleStorm - Unmasking the Privacy Risks of Apple Intelligence

Uncover the hidden privacy risks in Apple Intelligence through traffic analysis and OS inspection, revealing data flows and security concerns behind Apple's AI assistant claims.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Azure's Weakest Link - How API Connections Spill Secrets

Uncover critical Azure API Connection vulnerabilities that enable cross-tenant attacks and secret extraction with minimal privileges through Logic Apps and Power platforms.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

The CVSS Deception: How We've Been Misled on Vulnerability Severity

Uncover six operational challenges with CVSS vulnerability scoring, including underrated severity, exploit maturity burden, and formula errors, with practical guidance for improved security prioritization.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

WorstFit: Unveiling Hidden Transformers in Windows ANSI

Explore a novel attack vector exploiting Windows "Best Fit" feature to bypass security mechanisms and achieve code execution across applications like Microsoft Office, cURL, PHP, and Windows built-in executables.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

WiFi Calling: Revealing Downgrade Attacks and Not-so-private Private Keys

Uncover security vulnerabilities in WiFi Calling technology, including shared IPsec keys affecting millions of users and dangerous downgrade attacks allowing key lengths below 3GPP specifications.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

The Bugs in Your Bootloaders: Embedded Device Secure Boot Fails and How to Fix Them

Explore bootloader vulnerabilities in embedded devices that compromise secure boot chains, including real-world examples like the Dell iDRAC9 "RootBlock" vulnerability and strategies for identifying, exploiting, and fixing these critical security flaws.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

How to Get the Most Out of the Python Decompilers Uncompyle6 and Decompyle3 - How to Write and Read a Bytecode Decompiler

Master Python bytecode decompilation using Uncompyle6 and Decompyle3 tools, understand disassembly techniques, and explore novel approaches for creating decompilers across programming languages.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Security Analysis of Residential Gateways and ISPs: Global Network Domination is Sneakily Possible

Explore the security vulnerabilities in residential gateways across 11 ISPs in 8 countries, revealing how weak protection mechanisms enable network compromises and potential backdoor installations at massive scale.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Redefining the Origin of Secrecy in a Post-Quantum World

Explore innovative approaches to key generation in the post-quantum era, comparing mathematical and quantum-based solutions while introducing a new method leveraging finite randomness to create mutual secrecy against quantum threats.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Parse Me, Baby, One More Time: Bypassing HTML Sanitizer via Parsing Differentials

Explore the inherent flaws in server-side HTML sanitization and how parsing differentials can be exploited to bypass XSS protections. Learn about MutaGen, a framework that exposes vulnerabilities in popular sanitizers through HTML parsing quirks.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Over the Air: Compromise of Modern Volkswagen Group Vehicles

Discover critical security vulnerabilities in Volkswagen Group vehicles that allow attackers to execute code, bypass security, track location, access microphones, and steal data from millions of cars with MIB3 infotainment systems.

• YouTube
• 42 minutes
• Self-Paced
• Free Video