Black Hat Courses

Process Injection Techniques - Gotta Catch Them All

Comprehensive overview of Windows process injection techniques for x64 systems, focusing on medium integrity processes without privilege elevation. Explores various methods and their implications.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

DevSecOps - What, Why and How

Explore the transformation of DevOps into DevSecOps, covering open-source tools and cultural shifts needed for implementation, along with associated benefits and practical insights.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Controlled Chaos - The Inevitable Marriage of DevOps and Security

Explore DevOps basics, resilience, and chaos engineering. Discover factors behind elite organizations and how DevOps aligns with modern infosec goals in today's software-driven landscape.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Reverse Engineering WhatsApp Encryption for Chat Manipulation and More

Decrypting WhatsApp traffic and creating tools for vulnerability research, including a Burp Suite extension for investigating encrypted communications.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Dragonblood - Attacking the Dragonfly Handshake of WPA3

Uncover vulnerabilities in WPA3's Dragonfly handshake, including side-channel attacks and password partitioning techniques. Learn about design flaws and implementation issues affecting Wi-Fi security protocols.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Internet-Scale Analysis of AWS Cognito Security

Reveals findings from large-scale AWS Cognito security analysis, exposing vulnerabilities in identity pools granting access to thousands of S3 buckets, DynamoDB tables, and Lambda functions.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

All the 4G Modules Could Be Hacked

Explores vulnerabilities in 4G modules, demonstrating methods to probe and exploit weaknesses in car entertainment systems for remote control of vehicles.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Responding to a Cyber Attack with Missiles

Explore the blurred lines between cyber and physical warfare, examining government responses to cyber attacks and the evolving rules of engagement in modern conflicts.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Lessons From Two Years of Crypto Audits

Explore fascinating security issues and risks in memory-safe languages like Rust, based on insights from two years of cryptocurrency audits.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

MITRE ATT&CK - The Play at Home Edition

Learn how various cybersecurity teams can leverage MITRE ATT&CK framework to enhance threat tracking and protection strategies, with practical insights for immediate implementation.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Detecting Malicious Files with YARA Rules as They Traverse the Network

Learn to detect malicious files using YARA rules and Zeek IDS for early-stage attack identification, enhancing network security with improved performance and targeted scanning techniques.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

The Most Secure Browser? Pwning Chrome from 2016 to 2019

Explore Chrome browser security vulnerabilities and exploitation techniques from 2016 to 2019, presented by researchers who successfully pwned Nexus 6P in Mobile Pwn2Own 2016.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Bypassing the Maginot Line - Remotely Exploit the Hardware Decoder on Smartphone

Explore vulnerabilities in Qualcomm's Venus hardware decoder, learn its architecture, and discover remote exploitation techniques for smartphone security research.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

How to Build Synthetic Persons in Cyberspace

Explore the development of AI agents simulating attackers and defenders in cybersecurity, enhancing training for both defensive and offensive roles in network security.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

No Free Charge Theorem 2.0 - How to Steal Private Information from a Mobile Device Using a Powerbank

Exploiting hidden communication channels in smartphone charging to steal private data, despite Android's "Charging only" mode safeguards. Demonstrates vulnerability in public charging stations and powerbanks.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk