Black Hat Courses

Bochspwn Reloaded - Detecting Kernel Memory Disclosure with x86 Emulation and Taint Tracking

Explore kernel memory disclosure detection using x86 emulation and taint tracking. Learn about buffer overflows, memory corruption, and user-mode client interactions in kernel-mode systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

How We Created the First SHA-1 Collision and What it Means for Hash Security

Explore the creation of the first SHA-1 collision, its implications for hash security, and the challenges faced in developing a meaningful payload and scaling computation.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Behind the Plexiglass Curtain - Stats and Stories from the Black Hat NOC

Insider insights into Black Hat's network operations: statistics, anecdotes, and revelations from the Network Operations Center team's annual debrief.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Insecurity in Building Automation - How to Create Dark Buildings with Light Speed

Explore vulnerabilities in building automation systems, their potential for exploitation, and the implications for physical security in modern infrastructure.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

An ACE Up the Sleeve - Designing Active Directory DACL Backdoors

Explore Active Directory DACL backdoors, their offensive potential, and stealth techniques. Learn about control relationships, elevation paths, and persistence methods in AD objects.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Cracking the Lens - Targeting HTTP's Hidden Attack-Surface

Explore hidden attack surfaces in modern web infrastructure, focusing on transparent systems for performance and analytics. Learn to identify and exploit overlooked vulnerabilities.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Stepping Up Our Game - Re-focusing the Security Community on Defense and Making Security Work for Everyone

Facebook CSO Alex Stamos discusses the evolving role of cybersecurity, emphasizing the need for a renewed focus on defense and making security accessible to all in an era of heightened digital risks and societal impact.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Broadpwn - Remotely Compromising Android and iOS via a Bug in Broadcom's Wi-Fi Chipsets

Explore a critical Wi-Fi vulnerability affecting millions of Android and iOS devices, its technical details, and potential for remote exploitation without user interaction.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Ichthyology - Phishing as a Science

Explore real-world phishing attacks, psychological tactics, and advanced prevention techniques. Learn evidence-based strategies to protect against credential theft in this insightful cybersecurity presentation.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Cloak & Dagger - From Two Permissions to Complete Control of the UI Feedback Loop

Unveiling Android vulnerabilities: combining permissions for stealthy UI control attacks, exploring security mechanisms, and discussing potential countermeasures and Android team responses.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Breaking the x86 Instruction Set

Uncover hidden x86 instructions and hardware bugs through innovative processor fuzzing techniques and page fault analysis, revealing chipset secrets.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Revoke-Obfuscation - PowerShell Obfuscation Detection and Evasion Using Science

Explore PowerShell obfuscation detection techniques using scientific methods, including character frequency analysis, cosine similarity, and machine learning algorithms for improved cybersecurity.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

How the Feds Caught Russian Mega-Carder Roman Seleznev

Uncover the intricate investigation that led to the capture of Russian hacker Roman Seleznev, responsible for massive credit card fraud and point-of-sale hacks, through electronic evidence and international cooperation.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Making Diversity a Priority in Security

Experts discuss strategies and initiatives to increase diversity in cybersecurity, addressing recruitment, retention, mentorship, and overcoming biases to create a more inclusive industry.

• YouTube
• 1 hour 41 minutes
• Self-Paced
• Conference Talk

What Malware Authors Don't Want You to Know - Evasive Hollow Process Injection

Explore undocumented hollow process injection techniques used by malware authors to evade detection and blend with legitimate system processes.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk