Black Hat Courses

Running a Security Operations Center - Challenges, Solutions and Key Learnings

Explore challenges and solutions in operationalizing a Security Operations Center, covering threat hunting, behavioral analytics, and rapid product deployment for enhanced cybersecurity.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Meltdown - Basics, Details, Consequences

Explore Meltdown, a critical security vulnerability that breaks fundamental isolation between user applications and operating systems, allowing unauthorized access to system memory and sensitive data.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Attacking Client-Side JIT Compilers

Explore JIT compiler security in JavaScript engines, focusing on challenges, solutions, and potential vulnerabilities. Learn about optimization techniques and their impact on browser exploitation.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Screaming Channels - When Electromagnetic Side Channels Meet Radio Transceivers

Novel side-channel attacks on mixed-design chips exploiting electromagnetic leaks in radio signals, potentially breaking cryptography over large distances. Explores discovery, impact, and countermeasures.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

XOM-Switch - Hiding Your Code from Advanced Code Reuse Attacks in One Shot

Discover XOM-switch, a security tool enabling XOM on Linux applications using PKU. Learn about its end-to-end approach for protecting deployed apps without source code or heavy binary rewriting.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

A New Era of SSRF - Exploiting URL Parser in Trending Programming Languages

Explore a new SSRF exploit technique targeting URL parsers in popular programming languages. Learn about protocol smuggling, fuzzing tools, and discover vulnerabilities in widely-used libraries.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Analyzing & Breaking QNX Exploit Mitigations and PRNGs for Embedded Systems

Dissection of QNX's security features, including exploit mitigations and random number generators, for embedded systems in automotive, industrial, defense, and medical sectors.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Securing Your In-Ear Fitness Coach - Challenges in Hardening Next Generation Wearables

Explore security challenges and solutions for next-gen wearables, focusing on a custom Security Development Lifecycle for hardware, software, and cloud components in IoT ecosystems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

When Good Turns Evil - Using Intel SGX to Stealthily Steal Bitcoins

Explore how Intel SGX can be exploited to implement stealthy malware, extract secret RSA keys, and steal Bitcoins through cache attacks and other vulnerabilities in trusted execution environments.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

A New Method to Bypass 64-bit Linux ASLR

Explore a novel ASLR bypass technique for 64-bit Linux systems using "return-to-csu", applicable to any application due to its use of silently attached code.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Breaking the Attack Graph - How to Leverage Graphs to Strengthen Security in a Domain Environment

Explore how defenders can leverage graph-based thinking to strengthen security in domain environments, adapting to sophisticated attackers and enhancing prevention, detection, and investigation strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Exfiltrating Reconnaissance Data from Air-Gapped ICS - SCADA Networks

Explore techniques for exfiltrating data from isolated industrial networks, including PLC-based methods, frequency manipulation, and passive monitoring. Learn about attack vectors and detection strategies.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

A Retrospective Case Study of VMware Guest-to-Host Escape Vulnerabilities

Análisis detallado de vulnerabilidades de escape de máquinas virtuales VMware, explorando superficies de ataque, mecanismos RPC y casos de estudio de parches de seguridad recientes.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

A Process is No One - Hunting for Token Manipulation

Learn to generate hunt hypotheses for effective threat hunting, focusing on token manipulation techniques and targeted data collection for improved cybersecurity analysis.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Inside Android's SafetyNet Attestation

Explore Android's SafetyNet Attestation, its role in ecosystem security, and potential vulnerabilities. Learn about attack patterns, device integrity detection, and implementation challenges.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk