Black Hat Courses

Android Parcels - The Bad, the Good and the Better - Introducing Android's Safer Parcel

Explore Android Parcel vulnerabilities, exploit techniques, and a new exploit chain. Learn about security improvements and the introduction of SafeParcel for enhanced Android system protection.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Cross-Contract Ricochet Attacks - Off-Chain-On-Chain Manipulation of Billion Dollar NFT Collections

Explore innovative attack techniques on NFT collections, including cross-contract ricochet attacks and off-chain marketplace logic exploitation, revealing vulnerabilities in Ethereum's decentralized ecosystem.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Decompiling Deep Neural Network Compiled Binary

Explore techniques for decompiling compiled Deep Neural Network binaries, enabling model extraction, adversarial sample generation, and patching for enhanced security analysis of edge devices and embedded systems.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Scammers Who Scam Scammers, Hackers Who Hack Hackers - Exploring a Sub-economy on Cybercrime Forums

Explore the hidden world of cybercriminals targeting other cybercriminals on dark web forums. Uncover the thriving sub-economy of 'metaparasites' and their impact on criminal marketplaces.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Real-World Detection Evasion Techniques in the Cloud

Explore advanced cloud malware campaigns, focusing on serverless environments and containers. Learn about novel tactics used by adversaries to evade detection in cloud technologies.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Aikido - Turning EDRs to Malicious Wipers Using 0-day Exploits

Explore the creation of advanced wipers for cyber warfare, leveraging unprivileged user permissions to delete critical system files and render Windows unbootable through EDR exploitation.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Good Motive but Bad Design - Pitfalls in MPU Usage in Embedded Systems in the Wild

Explore pitfalls in Memory Protection Unit usage for IoT security. Analyze top microcontroller operating systems, uncovering potential vulnerabilities in embedded device defenses.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

How We Organize Large-Scale DDoS Exercises in the Netherlands

Explore the Dutch Anti-DDoS Coalition's innovative approach to national cybersecurity through large-scale exercises, cooperative mitigation strategies, and cross-sector collaboration.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Fuzzing and Breaking Security Functions of SIMATIC PLCs

Explore techniques for cracking TLS protocols, conducting security protocol fuzzing, and analyzing vulnerabilities in Siemens S7-1500/S7-1200 PLCs, with practical demonstrations of exploiting and controlling these industrial devices.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Knockout Win Against TCC - New Ways to Bypass Your MacOS Privacy Mechanisms

Explore techniques to bypass MacOS privacy mechanisms, including vulnerabilities in TCC framework, code injections, and system tool abuse. Compare security improvements between Monterey and Big Sur.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Conclusions and Key Takeaways from Day 2

Insightful discussion on pressing InfoSec issues and future strategies, featuring key takeaways from Black Hat Europe 2022 with industry experts Jeff Moss, Jiska Classen, Federico Maggi, Leigh-Anne Galloway, and Anant Shrivastava.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Grand Theft Drone - Reaching Breaking Point in Drone Proprietary RF Link Security

Explore vulnerabilities in drone remote control systems, focusing on proprietary protocols and their security implications. Learn about potential risks and the importance of open design principles in drone technology.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

LCDPwn - Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities Again

Explore Layer 2 Discovery Protocol vulnerabilities in enterprise devices, uncovering neglected attack surfaces and analyzing recent research to improve network security.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Exploring a New Class of Kernel Exploit Primitive

Uncover innovative kernel exploit techniques using limited primitives, focusing on turning seemingly benign bugs into powerful attack vectors for code execution and privilege escalation.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Design Flaws and Deployment Chaos in Cloud-Based IoT Access Control Policies

Uncovers security vulnerabilities in IoT access control policies on cloud platforms, revealing design flaws and deployment issues that pose risks for manufacturers and users.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk