Black Hat Courses

Securing America - Readiness, Response, and Resilience for Critical Infrastructure Defense

Discover CISA's operational approach to cybersecurity as national security, exploring critical infrastructure protection strategies and collaborative defense methods.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Breaking Out of The AI Cage - Pwning AI Providers with NVIDIA Vulnerabilities

Uncover critical NVIDIA Container Toolkit vulnerabilities that enable container escapes and compromise AI infrastructure across major cloud platforms.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Autonomous Timeline Analysis and Threat Hunting - An AI Agent for Timesketch

Discover how AI agents autonomously analyze digital forensic timelines and hunt threats in massive log datasets, revolutionizing incident response efficiency.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Vaulted Severance - Your Secrets Are Now Outies

Discover critical RCE vulnerabilities in HashiCorp Vault and CyberArk Conjur with live demonstrations of remote attacks on default configurations and learn detection/prevention methods.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Conjuring Hardware Failures to Breach CPU Privilege Boundaries

Discover how to exploit synthesized hardware failures to bypass CPU security boundaries and achieve privilege escalation through software-only attacks.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

From Slide Rules to GenAI - Musings of a Graybeard Public Servant on What's Changing, What's Not, and What Should

Explore cybersecurity evolution from analog to AI era, examining global digital vulnerabilities, supply chain risks, and strategies for building resilient infrastructure systems.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Enhancing Command Line Classification with Benign Anomalous Data

Discover how to revolutionize command line security by combining anomaly detection with LLMs to reduce false positives and enhance malicious command classification accuracy.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

FACADE - High-Precision Insider Threat Detection Using Contrastive Learning

Discover Google's FACADE AI system for detecting insider threats with 99.99% accuracy using contrastive learning and self-supervised ML on billions of daily events.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Advanced Active Directory to Entra ID Lateral Movement Techniques

Explore advanced lateral movement techniques from Active Directory to Entra ID, bypassing authentication and MFA in hybrid environments with undocumented methods.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Exploiting DNS for Stealthy User Tracking

Discover how statistical analysis of DNS traffic enables precise device tracking and user fingerprinting across networks, plus learn defensive countermeasures.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Remote Exploitation of Nissan Leaf - Controlling Critical Body Elements from the Internet

Discover how researchers remotely compromised a 2020 Nissan Leaf, exploiting Bluetooth vulnerabilities to control critical vehicle functions like steering, locks, and wipers via internet.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Sweeping the Blockchain - Unmasking Illicit Accounts in Web3 Scams

Discover ScamSweeper, a novel framework for detecting Web3 scams on Ethereum using dynamic transaction graph analysis and structure-temporal random walks to unmask illicit accounts.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Tinker Tailor LLM Spy - Investigate and Respond to Attacks on GenAI Chatbots

Discover how to investigate and respond to attacks on GenAI chatbots, including prompt injection incidents, using AI defense tooling and LLM guardrails for effective incident response.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

JDD - In-depth Mining of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction

Discover advanced techniques for mining Java deserialization vulnerabilities using bottom-up gadget search and dataflow-aided payload construction to identify zero-day exploits.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Think Inside the Box - In-the-Wild Abuse of Windows Sandbox in Targeted Attacks

Discover how APT groups exploit Windows Sandbox for evasion, analyzing Earth Kasha's tactics and learning defensive countermeasures for threat hunting.

• YouTube
• 25 minutes
• Self-Paced
• Free Video