Black Hat Courses

Zombie POODLE, GOLDENDOODLE, and How TLSv1.3 Can Save Us All

Explore advanced CBC padding oracle attacks, including a resurrected POODLE vulnerability and the faster GOLDENDOODLE attack. Learn how TLSv1.3 addresses these security issues.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Writing Trusted Applications in Rust

Explore using Rust for Trusted Applications, leveraging its security features like memory safety and error handling for system-level code development in secure environments.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Secure Boot Under Attack - Simulation to Enhance Fault Attacks & Defenses

Explore fault injection attacks on Secure Boot, their impact on embedded systems, and strategies for enhancing defenses through simulation techniques.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

So I Became a Domain Controller

Explore Active Directory replication vulnerabilities, focusing on SAMBA implementation and mimikatz's DCSync feature. Learn techniques for extracting secrets and impersonating domain controllers.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Mainframe Z-OS Reverse Engineering and Exploit Development

Explore mainframe security vulnerabilities, reverse engineering techniques, and exploit development for z/OS systems, challenging common assumptions about mainframe invulnerability.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

SirenJack - Cracking a Secure Emergency Warning Siren System

Explore the SirenJack vulnerability affecting emergency warning sirens, its potential impact, and the surprisingly simple methods used to exploit this critical infrastructure weakness.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

The Finest Penetration Testing Framework for Software-Defined Networks

Introducing DELTA: A powerful ONF-supported penetration testing tool for Software-Defined Networks. Learn about its capabilities and applications in enhancing SDN security.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Malware Buried Deep Down the SPI Flash - Sednit's First UEFI Rootkit Found in the Wild

Uncover Sednit's groundbreaking UEFI rootkit campaign, exploring its sophisticated techniques for deep system compromise and implications for cybersecurity in high-profile attacks.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Return of Bleichenbacher's Oracle Threat - ROBOT

Explore the resurgence of a critical TLS vulnerability affecting major vendors and websites, and learn why RSA PKCS #1 v1.5 encryption should be phased out.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

New Norms and Policies in Cyber-Diplomacy

Explore evolving cyber-diplomacy landscape, discussing UN consultations, private sector initiatives, and potential new norms in international cybersecurity following 2016 negotiations collapse.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

WireGuard - Next Generation Secure Network Tunnel

Explore WireGuard, a modern VPN protocol offering improved security, performance, and simplicity compared to traditional options like IPsec and OpenVPN. Learn about its innovative design and benefits.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

A Deep Dive into macOS MDM - and How it Can Be Compromised

Explore macOS MDM vulnerabilities, including bootstrapping stages, IPC flows, and network security. Includes live demo of potential nation-state actor exploit on new Mac devices.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

How TRITON Disrupted Safety Systems & Changed the Threat Landscape of Industrial Control Systems

Insights into TRITON attack framework targeting industrial safety systems, exploring its unprecedented impact on cyber-warfare and critical infrastructure protection. Analyzes implications for future threats.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Mental Health Hacks - Fighting Burnout, Depression and Suicide in the Hacker Community

Strategies for addressing mental health challenges in the hacker community, focusing on burnout, depression, and suicide prevention. Emphasizes the importance of recognizing and treating psychological issues.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Tales from the NOC - Going Public in Asia

Insider look at designing and securing Black Hat Asia's network infrastructure. Explore behind-the-scenes challenges, experiences, and evolving designs from the Network Operations Center team.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk