Black Hat Courses

Are Cyber-Attacks on the Power Grid Limited to Nation-State Actors?

Explore power grid vulnerabilities, live demo of feeder relay exploitation, and mitigation strategies. Learn about securing critical infrastructure and the responsible disclosure process.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

The Origin of Array Species - How Standards Drive Bugs in Script Engines

Exploring JavaScript's unique features and how they lead to vulnerabilities in various software, including Flash, Chrome, Edge, and Safari. Insights for developers and security researchers.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

AVPASS - Leaking and Bypassing Antivirus Detection Model Automatically

Explore techniques for leaking and bypassing antivirus detection models, including APK perturbation, model leaking, and auto-bypassing processes. Gain insights into commercial AV weaknesses.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Firmware is the New Black - Analyzing Past Three Years of BIOS - UEFI Security Vulnerabilities

Explore the rise of firmware vulnerabilities in recent years, their impact on system security, and the challenges in mitigating these threats in BIOS/UEFI environments.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

The Shadow Brokers - Cyber Fear Game-Changers

Explore the impact of The Shadow Brokers' leaks on cybersecurity, examining sophisticated nation-state tools and the evolving landscape of cyber fear as a geopolitical instrument.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Automated Detection of Vulnerabilities in Black-Box Routers and Other Network Devices

Discover a formal method for detecting protocol implementation vulnerabilities in closed-source network devices, focusing on OSPF in routers, without accessing source code or binaries.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Evil Bubbles or How to Deliver Attack Payload via the Physics of the Process

Explore innovative attack vectors in industrial control systems, focusing on exploiting physical processes to bypass security measures and deliver malicious payloads.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Blue Pill for Your Phone

Explore attack surfaces of hypervisors and TrustZone monitors in ARM-based phones, focusing on Google Nexus and Pixel devices. Learn about attack scenarios and interactions between privilege levels.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Electronegativity - A Study of Electron Security

Comprehensive analysis of Electron's security model, isolation mechanisms, and vulnerabilities in Electron-based applications. Explores IPC messaging, preloading, and design weaknesses.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Lessons Learned in Influencing Security Stakeholders Inside and Outside Your Organization

Explore strategies for influencing security stakeholders through cyber wargaming, including technical architecture, business value, and lessons learned from real-world implementations.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

rVMI - A New Paradigm for Full System Analysis

Explore rVMI, a powerful platform combining VMI and Rekall for interactive malware analysis, operating from the hypervisor with advanced event control capabilities.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages

Explore a novel SSRF exploit technique targeting URL parsers in popular programming languages. Learn about vulnerabilities in Python, PHP, Java, and more, uncovering inconsistencies between parsing and requesting.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Advanced Pre-Breach Planning - Utilizing a Purple Team to Measure Effectiveness vs. Maturity

Explore realistic adversary simulations and organizational responses through purple team exercises to enhance SOC and IR team effectiveness and maturity.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Delivering Javascript to World Plus Dog

Explore the security implications and threat model of serving third-party JavaScript across the web, with insights for startups building enterprise products.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Taking Over the World Through MQTT - Aftermath

Explore MQTT protocol vulnerabilities, SQL database attacks, and new device discoveries. Assess current security landscape and global response to previous findings in IoT and connected systems.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk