Black Hat Courses

XOM-Switch - Hiding Your Code from Advanced Code Reuse Attacks in One Shot

XOM-switch: A security tool enabling XOM on Linux apps using PKU, protecting against code reuse attacks without source code or heavy binary rewriting. Enhances application security effortlessly.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Breaking Android Kernel Isolation and Rooting with ARM MMU Features

Explore a new Android rooting solution, ReVent, exploiting a Use-After-Free vulnerability in 3.18 Linux kernels. Learn about breaking kernel isolation and ARM MMU features for device security.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Wi-Fi Direct to Hell - Attacking Wi-Fi Direct Protocol Implementations

Explore Wi-Fi Direct vulnerabilities in Android, HP printers, and Samsung Smart TVs. Learn about protocol architecture, discovery, connection processes, and frame formats. Includes PoC and fingerprinting tool release.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Lost in Transaction - Process Doppelgänging

Explore Process Doppelgänging, a stealthy attack technique that evades security solutions. Learn its advantages over Process Hollowing and understand its detection challenges.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

The Spear to Break the Security Wall of S7CommPlus

Unveiling vulnerabilities in S7CommPlus protocol, demonstrating potential security breaches in industrial control systems and proposing countermeasures for enhanced protection.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

How to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine

Explore vulnerability detection and exploitation in Intel Management Engine, bypassing protection mechanisms to run unsigned code on powered-off computers.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

GDPR and Third Party JS - Can It Be Done?

Explore GDPR compliance challenges for third-party JavaScript, examining privacy implications and potential solutions for data protection in web development.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Industroyer - Crashoverride - Zero Things Cool About a Threat Group Targeting the Power Grid

Análisis detallado del malware Industroyer utilizado en el ciberataque a la red eléctrica de Ucrania en 2016, sus capacidades y el grupo de amenazas detrás del ataque.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The UEFI Firmware Rootkits - Myths and Reality

Explore UEFI firmware security, vulnerabilities, and real-world applicability of attacks. Analyze rootkit scenarios and assess practical implications for system compromise at privileged levels.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Techniques to Gather Threat Intel and Track Actors

Discover 24 techniques for gathering threat intelligence and tracking actors, illustrated with 30 real-world cases. Learn about crimeware vulnerabilities, C&C misconfigurations, and underground marketplaces.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Go Get My - Vulnerabilities - An In-Depth Analysis of Go Language Runtime and the New Class of Vulnerabilities It Introduces

Explore Go language runtime vulnerabilities, their impact on applications, and potential security risks in this in-depth analysis of Golang's growing adoption across various programming domains.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Real-World Post-Quantum Cryptography - Introducing the OpenQuantumSafe Software Project

Explore OpenQuantumSafe, an open-source library for quantum-safe cryptography, including implementations, benchmarks, integration challenges, and future developments.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Hello From the Other Side - SSH Over Robust Cache Covert Channels in the Cloud

Explore practical cache covert channels in cloud environments for secret data exfiltration between isolated virtual machines, presented by security researchers at Black Hat Asia.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Testing Vehicles with CANToolz

Explore CANToolz framework for CAN bus analysis, featuring black-box testing of automotive networks and ECUs. Learn practical use-cases for vehicle security research and penetration testing.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Bypassing Secure Boot Using Fault Injection

Explore fault injection techniques to bypass Secure Boot in embedded systems, focusing on hardware-based attacks when logical vulnerabilities are absent.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk