Black Hat Courses

Knockout Win Against TCC - New Ways to Bypass Your MacOS Privacy Mechanisms

Explore techniques to bypass MacOS privacy mechanisms, including vulnerabilities in TCC framework, code injections, and system tool abuse. Compare security improvements between Monterey and Big Sur.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Conclusions and Key Takeaways from Day 2

Insightful discussion on pressing InfoSec issues and future strategies, featuring key takeaways from Black Hat Europe 2022 with industry experts Jeff Moss, Jiska Classen, Federico Maggi, Leigh-Anne Galloway, and Anant Shrivastava.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Grand Theft Drone - Reaching Breaking Point in Drone Proprietary RF Link Security

Explore vulnerabilities in drone remote control systems, focusing on proprietary protocols and their security implications. Learn about potential risks and the importance of open design principles in drone technology.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

LCDPwn - Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities Again

Explore Layer 2 Discovery Protocol vulnerabilities in enterprise devices, uncovering neglected attack surfaces and analyzing recent research to improve network security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Exploring a New Class of Kernel Exploit Primitive

Uncover innovative kernel exploit techniques using limited primitives, focusing on turning seemingly benign bugs into powerful attack vectors for code execution and privilege escalation.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Design Flaws and Deployment Chaos in Cloud-Based IoT Access Control Policies

Uncovers security vulnerabilities in IoT access control policies on cloud platforms, revealing design flaws and deployment issues that pose risks for manufacturers and users.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Writing Your Own Ticket to the Cloud Like APT - A Deep Dive to AD FS Attacks, Detections, and Mitigations

Explore AD FS attacks, detections, and mitigations for Azure AD security. Learn about identity federation vulnerabilities and strategies to protect cloud-based resources from unauthorized access.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

JS-ON - Security-OFF - Abusing JSON-Based SQL Queries

Explore security risks in SQL databases with JSON features. Learn about potential vulnerabilities and hacking techniques for JSON-based queries in major database engines.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Microsoft Defender for Office 365 Evasion - The Story of Confirmed Vulnerability

Unveiling vulnerabilities in Microsoft Defender for Office 365's Safe Attachments and Safe Links features, exposing potential evasion techniques and security implications for organizations.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Practically-Exploitable Cryptographic Vulnerabilities in Matrix

Uncover critical cryptographic vulnerabilities in Matrix's federated communication standard, compromising confidentiality and authentication claims against malicious servers.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

From Finding New Type of Logical Flaw at Linux Kernel to Developing New Heap Exploitation Technique

Discover Pspray, a novel Linux kernel exploitation technique enhancing reliability for targeted attacks. Learn about its effectiveness across various memory vulnerabilities and its impact on cybersecurity.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

The Hacker's Guide to Policyland

Comprehensive overview of UK cybersecurity policy priorities, initiatives, and development process. Learn how to influence outcomes and engage with government efforts in this field.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Select Bugs From Binary Where Pattern Like CVE Days

Explores static code analysis techniques for vulnerability detection in binary code, focusing on pattern extraction and efficient searching across large codebases, with practical examples.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Abusing CNC Technologies

Explore vulnerabilities in modern CNC machines, including network security risks, code leaks, and potential for sabotage. Learn about countermeasures to protect critical industrial assets.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Blind VCC Glitching Technique to Bypass the Secure Boot of Qualcomm MSM8916 Mobile SoC

Explore a blind VCC glitching technique to bypass secure boot mechanisms on mobile SoCs, demonstrated on Qualcomm MSM8916/APQ8016. Learn practical application and see a live demo of this effective method.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk