Black Hat Courses

A Compendium of Container Escapes

Comprehensive overview of container escape techniques, from basic concepts to advanced exploits, covering orchestrators, Docker sockets, mount points, and kernel structures.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Automation Techniques in C++ Reverse Engineering

Explore dynamic analysis techniques for C++ reverse engineering, focusing on structure usage and function argument types through DLL injection-based automation.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Playing Offense and Defense with Deepfakes

Explore deepfake technology's offensive and defensive applications, including creation process and underlying deep learning models. Gain insights into this powerful and controversial AI tool.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

All Your Apple Are Belong to Us - Unique Identification and Cross-Device Tracking of Apple Devices

Explore unique identification and cross-device tracking of Apple devices, including public APIs and vulnerabilities, to understand potential privacy implications and security risks.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Backdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers

Explore techniques for injecting malicious payloads into microcontrollers, from basic to advanced methods, to create hardware backdoors. Learn about firmware entry points and payload execution.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

0-Days and Mitigations - Roadways to Exploit and Secure Connected BMW Cars

Explore vulnerabilities in connected BMW cars' infotainment and telematics systems, including 0-day exploits, and learn about mitigation strategies for enhanced automotive cybersecurity.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Exploiting Windows Hello for Business

Uncover vulnerabilities in Windows Hello for Business and learn to scan and secure corporate environments with a new toolset for enhanced Active Directory visibility.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The Discovery of a Government Malware and an Unexpected Spy Scandal

Explore the eSurv case study and trace the evolution of lawful intercept from Windows Trojans to professional spyware, uncovering a government malware scandal and its implications.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Moving from Hacking IoT Gadgets to Breaking into One of Europe's Highest Hotel Suites

Explore tools and methods for hacking BTLE-based mobile phone key systems in hotels, from proof of concept to real-world application. Learn about vulnerabilities in IoT security and their practical implications.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Inside the Apple T2

Explore the inner workings of Apple's T2 chip, including methodology and tools for complex security research, going beyond publicly available technical details.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Women in Security - Building a Female InfoSec Community in Korea, Japan, and Taiwan

Explore how female InfoSec communities in Korea, Japan, and Taiwan are built, maintained, and overcome challenges to foster sustainable growth and attract new members.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Hacking Ten Million Useful Idiots - Online Propaganda as a Socio-Technical Security Project

Explore how online propaganda exploits socio-technical systems through data science, psychology, and security principles to influence millions of users.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Breaking Encrypted Databases - Generic Attacks on Range Queries

Explore techniques for securely storing and querying outsourced data, focusing on range queries. Learn about common building blocks, commercial solutions, and potential vulnerabilities in encrypted databases.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Securing the System - A Deep Dive into Reversing Android Pre-Installed Apps

Explore techniques for analyzing pre-installed Android apps, including emulator challenges, component collusion detection, and privileged context behavior changes.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Paging All Windows Geeks – Finding Evil in Windows 10 Compressed Memory

Explore Windows 10 memory compression implementation, undocumented structures, and algorithms to enhance forensic tools for detecting malicious activities in compressed memory.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk