Black Hat Courses

Practical Tips for Defending Web Applications in the Age of DevOps

Practical tips for adapting application security to modern DevOps practices, covering static analysis, dynamic scanning, and security visibility for rapid development cycles.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

3G - 4G Intranet Scanning and Its Application on the WormHole Vulnerability

Explore large-scale 3G/4G intranet scanning techniques and their application in detecting the WormHole vulnerability across millions of mobile devices in China's major ISPs.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

The Irrelevance of K-Bytes Detection - Building a Robust Pipeline for Malicious Documents

Learn best practices for building a robust document analysis pipeline to detect malicious content, covering file type detection, sandboxing, content inspection, and evasion techniques used by attackers.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

The Industrial Revolution of Lateral Movement

Explore advancements in targeted attacks and lateral movement techniques, examining their impact on cybersecurity and potential parallels to the Industrial Revolution.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Escalating Insider Threats Using VMware's API

Discover how VMware's API can be exploited to escalate insider threats, bypassing security measures that separate infrastructure and guest machine domains in enterprise environments.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Honey, I Shrunk the Attack Surface - Adventures in Android Security Hardening

Explore Android's attack surface reduction strategies, their impact on security, and future improvements. Gain insights into technical approaches and specific bug mitigation in this comprehensive overview.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Challenges of Cooperation Across Cyberspace

Exploring challenges in cyberspace governance, including insufficient awareness among communities, international security dialogues, and the struggle to address war and peace issues in the digital realm.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Game of Chromes - Owning the Web with Zombie Chrome Extensions

Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

BlueBorne - A New Class of Airborne Attacks that can Remotely Compromise Any Linux - IoT Device

Discover the dangers of BlueBorne, a new airborne attack method that can remotely compromise Linux and IoT devices. Learn about zero-day exploits, their impact, and how to protect against these threats.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Red Team Techniques for Evading, Bypassing, and Disabling MS Advanced Threat Protection and Advanced Threat Analytics

Explore advanced techniques for evading and disabling Windows Defender ATP, including post-breach tools and behavior analytics. Gain insights into Red Team strategies for bypassing enterprise security measures.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

Zero Days, Thousands of Nights - The Life & Times of Zero-Day Vulnerabilities and Their Exploits

Explore zero-day vulnerabilities and exploits through rare data analysis, revealing insights on their lifecycle, development, and implications for cybersecurity and policy.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Key Reinstallation Attacks - Breaking the WPA2 Protocol

Discover how key reinstallation attacks exploit WPA2 vulnerabilities, compromising network security. Learn about attack techniques, impacts, and countermeasures for better protection.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Security Through Distrusting

Explore security approaches from trusting everything to distrusting nearly all components. Learn about innovative techniques for system protection and data leak prevention.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Diplomacy and Combating Evolving International Cyber Threats

Explore the evolving landscape of international cyber diplomacy, focusing on efforts to counter threats, promote norms, and address challenges in cyberspace from a policy perspective.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

Attacking Encrypted USB Keys the Hard - ware Way

Explore hardware vulnerabilities in AES-encrypted USB devices through an audit of multiple keys and hard drives, revealing if they truly secure data as claimed.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk