Black Hat Courses

The Legal Landscape for a Cybersecurity Professional Seeking to Safeguard Sensitive Client Data

Explore legal aspects of cybersecurity contracts, including risk allocation and service agreement formation, to effectively protect client data and navigate professional responsibilities.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

So You Want to Market Your Security Product

Explore FTC regulations on deceptive advertising in security product marketing. Learn to avoid violations and create compliant, ethical promotional strategies.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Fractured Backbone - Breaking Modern OS Defenses with Firmware Attacks

Explore firmware vulnerabilities in UEFI, Mac EFI, and Coreboot, and learn about potential stealth implants that can bypass modern OS defenses.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

The Avalanche Takedown - Landslide for Law Enforcement

Learn about the takedown of Avalanche, a secure server infrastructure used for cybercrime. Explore the investigation, challenges, and international cooperation in dismantling this network that caused massive financial losses.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

New Adventures in Spying 3G and 4G Users - Locate, Track & Monitor

Unveiling vulnerabilities in 3G/4G networks, introducing novel attack vectors for user tracking and monitoring, and discussing potential privacy implications for mobile users worldwide.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

When IoT Attacks - Understanding the Safety Risks Associated with Connected Devices

Explore the potential physical safety risks of IoT devices being repurposed for malicious attacks, going beyond known cybersecurity threats to examine real-world dangers.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Real Humans Simulated Attacks - Usability Testing with Attack Scenarios

Explore user studies for security software, focusing on simulated attack scenarios to assess tool effectiveness and user behavior during threats.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Protecting Pentests - Recommendations for Performing More Secure Tests

Comprehensive recommendations for building secure penetration testing operations, including technical aspects, policies, procedures, and client communication strategies.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

They're Coming for Your Tools - Exploiting Design Flaws for Active Intrusion Prevention

Explore design flaws in popular attack tools and techniques, and learn strategies for active intrusion prevention in this cybersecurity presentation from Black Hat.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Automated Testing of Crypto Software Using Differential Fuzzing

Discover differential fuzzing for efficient cryptographic software testing, focusing on logic bugs rather than memory corruption. Learn principles, tools, and real-world applications.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

WSUSpendu - How to Hang WSUS Clients

Explore a novel approach to control networks through WSUS servers, bypassing limitations and potentially attacking air-gapped systems. Learn techniques, limitations, and protective measures.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Comparing Security Curricula and Accreditations to Industry Needs

Análisis de currículos de seguridad y acreditaciones frente a las necesidades de la industria, examinando su desarrollo, fuerzas que los moldean y soluciones propuestas para acreditar programas.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Taking DMA Attacks to the Next Level

Unveils a novel, undetectable DMA attack exploiting DDR4 hardware vulnerabilities, enabling arbitrary memory access in live systems using a custom FPGA probe during sleep state.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

The Art of Securing 100 Products

Learn practical approaches to scale application security, implement effective tools, and build a successful program for securing numerous products simultaneously.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

FlowFuzz - A Framework for Fuzzing OpenFlow-Enabled Software and Hardware Switches

Explore FlowFuzz, a fuzzing framework for SDN switches using OpenFlow protocol. Learn about testing and securing software-defined networking infrastructure.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk