Black Hat Courses

I'm Not a Human - Breaking the Google reCAPTCHA

Explore techniques to bypass Google's reCAPTCHA using risk analysis manipulation, deep learning for image recognition, and automated solving methods. Discusses implications for CAPTCHA security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Hey, Your Parcel Looks Bad - Fuzzing and Exploiting Parcelization Vulnerabilities in Android

Explore Android's Binder IPC vulnerabilities through fuzzing and exploitation techniques. Learn to identify, analyze, and exploit "BadParcel" issues for privilege escalation in high-privilege processes.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Never Trust Your Inputs - Causing Catastrophic Physical Consequences From The Sensor

Explore security vulnerabilities in analog-to-digital conversion for industrial control systems. Learn how attackers can manipulate sensor data to cause physical consequences while evading detection.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Mapping the Wireless IoT

Explore wireless IoT security challenges, signal identification techniques, and best practices for revealing unknown signals. Includes a demo of a new tool for mapping radio spectrum and identifying devices.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Break Out of The Truman Show - Active Detection and Escape of Dynamic Binary Instrumentation

Explore active detection techniques for Dynamic Binary Instrumentation, focusing on exploiting weaknesses and escaping control. Learn to identify and overcome DBI environments in cybersecurity.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Rapid Radio Reversing

Explore wireless security research techniques combining SDR and non-SDR tools. Learn efficient reverse engineering processes for analyzing and decoding radio signals in this hands-on demonstration.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Enterprise Apps - Bypassing the iOS Gatekeeper

Explore iOS security vulnerabilities through enterprise apps, examining real-world statistics and a zero-day attack that bypasses Apple's gatekeeper, revealing critical flaws in the iOS security model.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

A New CVE-2015-0057 Exploit Technology

Explores CVE-2015-0057 vulnerability, User Mode Callback mechanism, and new exploit techniques in Windows kernel. Analyzes exploit methodology, vulnerability detection, and implications for system security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

DSCompromised - A Windows DSC Attack Framework

Explore a PowerShell toolkit leveraging Windows Desired State Configuration for command-and-control, malware persistence, and automatic re-infection. Learn attack techniques and defensive strategies.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Cantact - An Open Tool for Automotive Exploitation

Explore CANtact, an open-source tool for automotive network analysis. Learn to view, decode, and manipulate CAN bus traffic for reverse engineering and security testing of vehicle systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Hacking a Professional Drone

Explore vulnerabilities in professional drones and learn how to exploit them to take control. Discover practical fixes and remediation approaches for these security compromises.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

PLC-Blaster - A Worm Living Solely in the PLC

Demonstration of a self-contained PLC worm targeting Siemens S7-1200 PLCs, showcasing network scanning, self-propagation, and remote control capabilities while evading detection.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Android Commercial Spyware Disease and Medication

Explores Android vulnerabilities exploited by spyware and proposes a detection method using fuzz testing to mitigate risks and protect user privacy on smartphones.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Automated Dynamic Firmware Analysis at Scale - A Case Study on Embedded Web Interfaces

Automated framework for discovering vulnerabilities in embedded web interfaces through dynamic firmware analysis. Validates effectiveness on 1925 firmware images from 54 vendors, uncovering critical security flaws.

• YouTube
• 1 hour 8 minutes
• Self-Paced
• Conference Talk

The Kitchen's Finally Burned Down - DLP Security Bakeoff

Explore flaws in Data Loss Prevention solutions, including administrative interfaces and inspection engines, to understand their capabilities and shortcomings in protecting sensitive information.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk