Black Hat Courses

About Directed Fuzzing and Use-After-Free - How to Find Complex & Silent Bugs

Explore directed fuzzing techniques for targeted vulnerability detection, focusing on bug reproduction and patch-oriented testing to uncover complex and silent software flaws.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Virtually Private Networks

Explore the security implications of remote access solutions and VPNs for enterprise mobile workforces, examining potential vulnerabilities and challenges.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

All You Ever Wanted to Know about the AMD Platform Security Processor and Were Afraid to Emulate - Inside a Deeply Embedded Security Processor

Explore AMD's Platform Security Processor: its role in system bootstrapping, security features, and proprietary nature. Gain insights into this embedded ARM core within x86 CPUs.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Black-Box Laser Fault Injection on a Secure Memory

Explore vulnerability research on the Microchip ATECC508A secure memory, examining laser fault injection techniques to bypass cryptographic authentication in IoT devices.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Escaping Virtualized Containers

Explore container escape techniques and new sandboxing tools using unikernels, lightweight VMs, and userspace-kernels to enhance isolation between host and container OS.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Portable Document Flaws 101

Dive deep into PDF's insecure features and vulnerabilities, exploring malicious capabilities affecting major viewers through systematic analysis and in-depth examination.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

Explore a Safari exploit chaining six vulnerabilities to compromise the macOS kernel. Learn about offensive security research and browser-based kernel exploitation techniques.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Breaking Samsung's Root of Trust - Exploiting Samsung S10 Secure Boot

Exploración de vulnerabilidades en el arranque seguro de Samsung S10, analizando el manejo de solicitudes USB en S-Boot y sus implicaciones para la seguridad del dispositivo.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Lamphone - Real-Time Passive Reconstruction of Speech Using Light Emitted from Lamps

Explore a novel eavesdropping technique using light bulb vibrations to reconstruct speech in real-time, overcoming limitations of previous side-channel attacks for audio surveillance.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Hacking Public Opinion

Explore tactics of modern information operations, their impact on public opinion, and how to defend against them in the context of upcoming elections.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Stress Testing Democracy - Election Integrity During a Global Pandemic

Explore challenges in maintaining election integrity amid a pandemic, focusing on secure voting technology and protecting voter health. Learn about scaling up safer, accessible voting mechanisms.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

Black Hat Fast Chat

Insights into Black Hat Briefings review process, Malware Track leadership, and community development initiatives from cybersecurity expert Matt Suiche, founder of Comae Technologies.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

A Surprise Trip to Zero-Trust Land

Explore zero-trust security's benefits in addressing current and future challenges beyond attacks, with insights from industry experts on implementation and design patterns.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Simple Spyware - Androids Invisible Foreground Services and How to Abuse Them

Explore Android's permission vulnerabilities, invisible foreground services, and spyware risks. Learn detection methods and protective measures for enhanced mobile security.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Inside Out - The Cloud Has Never Been So Close

Explore a novel graph-based approach to cloud infrastructure attacks, revealing vulnerabilities in resource relationships and demonstrating potential privilege escalation techniques.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk