Black Hat Courses

I Know What You Saw Last Minute - The Chrome Browser Case

Explore HTTP Adaptive Streaming vulnerabilities in Chrome, focusing on YouTube's DASH implementation and potential privacy risks through traffic analysis and machine learning techniques.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Understanding Old Malware Tricks to Find New Malware Families

Explore advanced techniques for detecting and analyzing malware using machine learning, big data, and network analysis to stay ahead of evolving cyber threats.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Automating Incident Response

Streamline incident response with automation, reducing reliance on specialized skills. Learn to build an investigation engine, leverage ontologies, and enhance operational efficiency.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

How to Fool an ADC, Part II - Hiding Destruction of Turbine with a Little Help of Signal Processing

Explore techniques to manipulate analog-to-digital converters, focusing on signal processing methods to deceive industrial control systems and embedded devices. Learn potential vulnerabilities and their implications.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Chasing Foxes by the Numbers - Patterns of Life and Activity in Hacker Forums

Explore patterns of cyber criminal activity in underground forums, analyzing behavior across clear, deep, and dark web platforms to understand hacker communities and their focus areas.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Stumping the Mobile Chipset

Explore vulnerabilities in Android chipsets, focusing on Qualcomm's role in mobile security. Learn about recent issues and Google's responses to tighten Android's fragmented ecosystem.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Ghost in the PLC - Designing an Undetectable Programmable Logic Controller Rootkit

Explore the design of undetectable rootkits for Programmable Logic Controllers, uncovering vulnerabilities and potential threats to industrial control systems.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Pocket-Sized Badness - Why Ransomware Comes as a Plot Twist in the Cat-Mouse Game

Explore the rise of ransomware as a disruptive force in cybersecurity, examining its unique characteristics, profit motives, and impact on the evolving landscape of digital threats.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs

Discover practical attacks on SSL VPNs, compromising corporate networks. Learn out-of-the-box security techniques, immediate mitigation strategies, and the vulnerabilities of Virtual Private Networks.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Unpacking the Packed Unpacker - Reverse Engineering an Android Anti-Analysis Native Library

Explore techniques used by malware authors to prevent reverse engineering of Android native libraries, and learn strategies to overcome these anti-analysis traps.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

An Attacker Looks at Docker - Approaching Multi-Container Applications

Explore containerization's impact on offensive security operations, focusing on Docker's implications for penetration testing and application security in multi-container environments.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies

Uncover critical security vulnerabilities in trading technologies, including unencrypted data, DoS risks, and weak authentication. Learn about responsible disclosure and recommendations for safer trading practices.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs

Uncover hidden hardware backdoors in x86 CPUs, exploring their depth and implications. Learn about the feasibility of widespread hardware vulnerabilities and their potential impact on processor security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Fire & Ice - Making and Breaking macOS Firewalls

Explore macOS firewall creation and vulnerabilities, covering kernel-level socket filtering, user-mode communication, secure installation, and self-defense mechanisms. Learn about firewall bypasses and potential weaknesses.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

How Can Communities Move Forward After Incidents of Sexual Harassment or Assault

Strategies for community response to sexual harassment/assault incidents, focusing on survivor support, accountability, and bystander intervention. Explores leadership roles and community healing.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk