Black Hat Courses

Hack Microsoft Using Microsoft Signed Binaries

Explore advanced hacking techniques using Microsoft-signed tools, including PowerShell and debuggers, to achieve various attacks and persistence on Windows systems.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Never Let Your Guard Down - Finding Unguarded Gates to Bypass Control Flow Guard with Big Data

Explore techniques to bypass Control Flow Guard in Windows using big data analysis, focusing on unguarded gates and indirect branches for enhanced security understanding.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Betting Against the House - Security and Stability When the Odds are Against You

Insights on designing and securing enterprise networks under constraints, drawing from Black Hat's network experiences. Covers evolution, challenges, and future directions in network management.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

MASHaBLE - Mobile Applications of Secret Handshakes Over Bluetooth LE

Explore cryptographic secret handshakes for mobile devices using Bluetooth LE, enabling mutual authentication between untrusted parties in virtual secret communities.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

CTX - Eliminating BREACH with Context Hiding

Explore advanced techniques to mitigate BREACH attacks in web applications using compression and encryption. Learn about Context Hiding and its implementation in practical scenarios.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Randomization Can't Stop BPF JIT Spray

Explores Linux BPF JIT compiler vulnerabilities, demonstrating how randomization fails to prevent JIT spray attacks and proposing mitigations for enhanced kernel security.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE

Explore Kerberos delegation vulnerabilities in Windows networks, learning techniques for unauthorized impersonation and remote code execution. Gain insights into potential security risks and mitigation strategies.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Domo Arigato, Mr. Roboto - Security Robots a la Unit-Testing

Explore security unit testing for custom code, focusing on inoculating applications, identifying endpoints, and addressing common vulnerabilities through automated testing frameworks.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Detach Me Not - DoS Attacks Against 4G Cellular Users Worldwide from Your Desk

Explores DoS attacks on 4G cellular networks, revealing vulnerabilities in mobile communication systems and their potential for user tracking and manipulation. Discusses implications for security and privacy in telecommunications.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

Man-in-the-SCADA - Anatomy of Data Integrity Attacks in Industrial Control Systems

Explore data integrity attacks in industrial control systems, focusing on attacker perspectives and strategies for unauthorized access to control networks and equipment.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

When Virtualization Encounters AFL - A Portable Virtual Device Fuzzing Framework with AFL

Explore a portable virtual device fuzzing framework using AFL to enhance VM security. Learn techniques for identifying vulnerabilities in virtual devices and preventing VM escape attacks.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Conclusions and Key Takeaways from Black Hat Europe 2016

Insightful discussion on critical InfoSec trends and their impact on future strategies, featuring industry experts at Black Hat Europe 2016's closing session.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Signing Into One Billion Mobile App Accounts Effortlessly with OAuth2.0

Explore vulnerabilities in OAuth2.0 protocol when used for mobile app authentication, uncovering potential security risks in Single-Sign-On services for billions of users.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Drop the ROP - Fine-Grained Control-Flow Integrity for the Linux Kernel

Explore fine-grained Control-Flow Integrity for Linux kernel security, addressing ROP attacks and dynamic kernel modules. Learn advanced mitigation techniques and implementation challenges.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Exploiting USB-IP in Linux

Explore USB/IP vulnerabilities in Linux, including buffer overflow and data injection. Learn about architecture, protocol, and security implications of this USB device sharing framework.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk