Black Hat Courses

Invoke-DOSfuscation - Techniques for CMD Obfuscation

Explore advanced cmd.exe obfuscation techniques, including carets, quotes, and stdin argument hiding. Learn complex methods like string manipulation and novel encoding approaches for enhanced command-line security.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Lies and Damn Lies - Getting Past the Hype of Endpoint Security Solutions

Debunking endpoint security buzzwords and hype. Practical insights on evaluating solutions beyond marketing claims, focusing on real-world effectiveness and meaningful metrics.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Intel AMT Stealth Breakthrough

Explore remote exploitation techniques for Intel Management Engine, affecting most Intel-based systems since 2010. Learn about vulnerabilities and potential security risks in this critical subsystem.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Defeating Samsung KNOX with Zero Privilege

Exploit chain to defeat Samsung KNOX security from zero privilege, bypassing KASLR, DFI, SELinux, and escalating privileges. Detailed vulnerabilities and mitigation bypassing techniques revealed.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

PEIMA - Harnessing Power Laws to Detect Malicious Activities

Explore power law-based techniques for detecting and mitigating DDoS attacks, intrusions, and other malicious network activities using PEIMA methodology.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

What's on the Wireless - Automating RF Signal Identification

Explore automated RF signal identification techniques for monitoring diverse wireless technologies in organizational environments, enhancing security and management capabilities.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Go to Hunt, Then Sleep

Bedtime story-style guide for cybersecurity professionals on conducting threat hunts. Covers five essential hunts to find bad actors and improve organizational security.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Hourglass Model 2.0 - Case Study of Southeast Asia Underground Services Abusing Global 2FA

Explore the Hourglass Model 2.0 framework for gathering security intelligence on underground marketplaces, focusing on 2FA abuse in Southeast Asia and its implications for threat prevention.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Nation-State Moneymule's Hunting Season - APT Attacks Targeting Financial Institutions

Unveiling recent APT campaigns targeting financial institutions, including banks, ATM companies, and Bitcoin exchanges, with insights on malware, vulnerabilities, and attack vectors.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

Server Tailgating - A Chosen-Plaintext Attack on RDP

Uncover a chosen-plaintext attack on Windows authentication, exploiting a vulnerability in common protocols. Learn about the attack's mechanics, implications for network security, and mitigation strategies.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Datacenter Orchestration Security and Insecurity - Assessing Kubernetes, Mesos, and Docker at Scale

Explore security challenges and solutions for large-scale datacenter orchestration platforms like Kubernetes, Mesos, and Docker, focusing on cloud-scale infrastructure and software-defined datacenters.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Hacking Hardware with a $10 SD Card Reader

Explore firmware extraction techniques using affordable SD card readers, bypassing expensive tools and complex setups for efficient hardware hacking and analysis.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

OpenCrypto - Unchaining the JavaCard Ecosystem

Explore OpenCrypto, a library enabling full utilization of JavaCard capabilities across vendors. Learn about cryptographic coprocessors and ecosystem advancements in smart card technology.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

ShieldFS - The Last Word in Ransomware Resilient File Systems

Innovative file system solution to combat ransomware attacks, offering preventive and reactive security measures beyond traditional detection approaches for enhanced data protection.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Web Cache Deception Attack

Explore the Web Cache Deception attack, a new vector exposing sensitive user data through server and caching manipulation. Learn about risks, conditions, and mitigation strategies.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk