Black Hat Courses

Splunking Dark Tools - A Pentesters Guide to Pwnage Visualization

Explore data analytics and visualization tools for red team operations, enhancing pentesting capabilities through advanced consolidation and analysis techniques.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Go Nuclear - Breaking Radiation Monitoring Devices

Comprehensive exploration of vulnerabilities in radiation monitoring devices through reverse engineering, RF analysis, and hardware hacking, revealing critical security flaws in nuclear industry equipment.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Exploiting a Single SQLite Vulnerability Across Multiple Software

Uncover remote exploits in SQLite's memory corruption vulnerabilities, revealing potential attack surfaces across various applications using this widely-embedded database software.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Fighting the Previous War - Attacking and Defending in the Era of the Cloud

Updating attack and defense strategies for cloud-based systems, focusing on interdependence and pivoting techniques. Covers DDoS, footprinting, exploitation, persistence, and more in AWS environments.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Offensive Malware Analysis - Dissecting OSX/FruitFly via a Custom C&C Server

Explore malware analysis techniques using a custom C&C server for OSX/FruitFly. Learn to decode, monitor, and understand malware behavior for enhanced cybersecurity skills.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

How to Make Nation-State and Intelligence Attackers' Lives Much Harder on Mobile Networks

Explore advanced SS7 attacks and defenses using open-source firewall. Learn to trick attackers, reduce vulnerabilities, and enhance mobile network security against intelligence agencies.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Evilsploit - A Universal Hardware Hacking Toolkit

Innovative method for hardware hacking using connection matrix, enabling arbitrary analog-alike connections and versatile bus interfacing for comprehensive hardware exploitation.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Protecting Visual Assets - Digital Image Counter-Forensics

Explore counter-forensic techniques to safeguard image-based intelligence from exploitation attacks, addressing current and emerging threats in visual asset protection.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Breaking Electronic Door Locks Like You're on CSI - Cyber

Learn techniques for bypassing electronic door locks, exploring vulnerabilities and hacking methods used in popular media depictions of cybersecurity.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

All Your Emails Belong to Us - Exploiting Vulnerable Email Clients via Domain Name Collision

Explore email vulnerabilities and domain name collisions as potential security threats, focusing on protecting email accounts from advanced persistent threats and exploitation techniques.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Mobile-Telephony Threats in Asia

Explore the mobile-telephony cybercrime ecosystem in Asia through a 7-month honeypot study, revealing SMS scams, fraudulent calls, and VoIP phishing attempts. Gain insights into real threats facing mobile users.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Securely Implementing Network Protocols - Detecting and Preventing Logical Flaws

Explore model-based testing techniques to detect logical bugs in SSL/TLS and Wi-Fi implementations, enhancing network protocol security and implementation.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Wire Me Through Machine Learning

Explore how machine learning can combat Business Email Compromise scams, a sophisticated threat that has cost organizations billions in losses through fraudulent wire transfers.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Orange is the New Purple - How and Why to Integrate Development Teams with Red - Blue Teams to Build More Secure Software

Explore a new paradigm for integrating development teams with offensive and defensive teams to enhance software security throughout the development lifecycle, fostering knowledge sharing and strengthening defenses.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Myth and Truth About Hypervisor-Based Kernel Protector - The Reason Why You Need Shadow-Box

Explore hypervisor-based kernel protection, its limitations, and the need for higher-privilege solutions like Shadow-Box to combat rootkits and kernel exploits effectively.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk