Black Hat Courses

Breaking Bootloaders on the Cheap

Reverse-engineering bootloaders of popular microcontrollers to assess vulnerabilities in readout protection, focusing on software-based attacks and critical flaws in specific chip families.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Trust in Apple's Secret Garden - Exploring and Reversing Apple's Continuity Protocol

Explore Apple's Continuity protocol, examining privacy and security implications of seamless device communication. Uncover potential vulnerabilities in AirDrop, iMessage, and other features within Apple's ecosystem.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

BlueMaster - Bypassing and Fixing Bluetooth-Based Proximity Authentication

Explore security vulnerabilities in Bluetooth proximity authentication, including new attacks on Android Smart Lock and Windows Dynamic Lock, and learn potential fixes for these issues.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

OEM Finder - Hunting Vulnerable OEM IoT Devices at Scale

Discover a tool for identifying vulnerable OEM IoT devices across thousands of images, revealing security risks in both supplier and vendor firmware distributions.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

New Exploit Technique in Java Deserialization Attack

Unveiling advanced Java deserialization vulnerabilities: analysis of 10,000+ libraries, new exploit techniques, and their profound impact on Java security. Enhances attack vectors beyond deserialization.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Side Channel Attacks in 4G and 5G Cellular Networks

Explore vulnerabilities in 4G/5G networks, focusing on the ToRPEDO attack that exploits paging occasions to compromise user privacy and security.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Bring Your Own Token to Replace the Traditional Smartcards for Strong Authentication and Signing

Explore Cisco's innovative BYOT solution replacing traditional smartcards, enabling self-provisioned digital identities for enhanced authentication and cryptographic functions using USB tokens.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Detecting -Un-Intentionally Hidden Injected Code by Examining Page Table Entries

Explore techniques for detecting hidden injected code through page table entry analysis, covering both intentional malware concealment and unintentional OS paging mechanisms.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit

Explore coverage-based fuzzing of RDP client virtual channels, targeting complex functionalities like Sound, Graphics, USB, and Filesystem to uncover potential vulnerabilities and crashes.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Booting the iOS Kernel to an Interactive Bash Shell on QEMU

Explore iOS kernel emulation on QEMU, achieving interactive bash shell and live kernel debugging. Discover groundbreaking research towards a full open-source iOS system emulator.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Lessons and Lulz - The 5th Annual Black Hat USA NOC Report

Insights and humor from Black Hat's Network Operations Center, revealing security professionals' behavior on open WiFi and discussing network setup, security, and improvements.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Project Zero - Five Years of Make 0Day Hard

Explore Project Zero's impact on cybersecurity, its core principles, and the need for such initiatives in the tech industry. Gain insights into vulnerability research and mitigation strategies.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Chain of Fools - An Exploration of Certificate Chain Validation Mishaps

Explore implications of poor cryptographic API design, insecure certificate chain validation, and widespread usage of APIs like Android SafetyNet. Recommendations for implementers and API authors are proposed.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Everybody Be Cool, This Is a Robbery!

Explore attack paths on a major bank HSM, including unauthenticated methods for full control, in this technical presentation targeting high-security solutions.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Shifting Knowledge Left - Keeping up with Modern Application Security

Explore modern application security challenges in DevSecOps, including evolving web technologies, persistent vulnerabilities, and emerging framework defenses against common threats.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk