Black Hat Courses

Conclusions & Key Takeaways from Black Hat Asia 2017

Explore key cybersecurity insights from Black Hat Asia 2017, covering topics like attacker specialization, machine learning, digital nations, and biometrics.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

AI Based Antivirus - Can AlphaAV Win the Battle in Which Man Has Failed?

Explore deep learning-based antivirus technology with low false positive and negative rates, already in production since 2016. Learn about AI's potential to revolutionize cybersecurity.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Dig Into the Attack Surface of PDF and Gain 100+ CVEs in 1 Year

Explore PDF vulnerabilities, efficient fuzzing techniques, and attack surface analysis to uncover 100+ CVEs in a year, with statistical insights on security weaknesses.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Bypassing Clang's SafeStack for Fun and Profit

Explore SafeStack's vulnerabilities and potential bypasses in Clang compiler, analyzing implementation weaknesses and demonstrating practical exploitation techniques for memory corruption.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation

Explore new attacks on HTTP/2, the emerging Internet protocol. Learn about vulnerabilities, implementation flaws, and potential mitigations in this cutting-edge cybersecurity analysis.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Anti-Plugin - Don't Let Your App Play as an Android Plugin

Explore Android plugin technology's security risks and learn defensive strategies to protect your app from unauthorized loading and execution as a plugin.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Cross the Wall - Bypass All Modern Mitigations of Microsoft Edge

Explore techniques to bypass ASLR, DEP, and CFG exploit mitigations in Microsoft Edge on Windows 10, even with arbitrary address read/write capabilities.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Daily-Life Peeper - Bug Hunting and Exploit Techniques in IoT

Explore IoT security vulnerabilities, bug hunting techniques, and exploit methods. Learn to identify and address risks in everyday connected devices for improved cybersecurity.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Cyber Judo - Offensive Cyber Defense

Learn offensive techniques to enhance your organization's cyber defense against advanced, targeted attacks from security experts Itai Grady and Tal Be'ery.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Another Brick Off the Wall - Deconstructing Web Application Firewalls Using Automata Learning

Explore techniques for auditing and bypassing Web Application Firewalls using automata learning, with a focus on code injection attacks and grammar-oriented filter auditing.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Flip Feng Shui - Rowhammering the VM's Isolation

Explore how attackers can exploit Rowhammer vulnerabilities to compromise VM isolation, demonstrating practical attacks on OpenSSH and discussing implications for cloud security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Rooting Every Android - From Extension to Exploitation

Explore Android rooting techniques, from kernel vulnerabilities to exploitation, addressing challenges like SELinux enforcement and limited attack surfaces in modern devices.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Backslash Powered Scanning - Hunting Unknown Vulnerability Classes

Explore innovative web scanning techniques to detect unknown injection vulnerabilities, moving beyond traditional payload-based methods for more comprehensive security testing.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Narcos, Counterfeiters and Scammers - An Approach to Visualize Illegal Markets

Visualizing online counterfeiting networks through passive DNS analysis, revealing cybercriminal strategies and providing insights for law enforcement to combat digital fraud.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Towards a Policy-Agnostic Control-Flow Integrity Implementation

Explore control-flow integrity implementation challenges, focusing on security and practicality. Learn about code-reuse attacks, randomization, and hardware-based solutions for robust CFI.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk