Black Hat Courses

Su-A-Cyder - Homebrewing Malware for IOS Like a BO$$

Hands-on workshop for developing iOS malware using the su-A-Cyder framework. Learn techniques to create and execute malware samples on Apple devices, exploiting recent policy changes.

• YouTube
• 2 hours 39 minutes
• Self-Paced
• Conference Talk

Automated Detection of Firefox Extension-Reuse Vulnerabilities

Discover a novel extension-reuse vulnerability in Firefox and learn about CROSSFIRE, a static analyzer that detects these vulnerabilities and generates exploit templates for rapid proof-of-concept creation.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

The Security Wolf of Wall Street - Fighting Crime With High-Frequency Classification

Explore real-time threat detection using machine learning on massive DNS data. Learn about Avalanche stream processing and NLP-Rank for automated phishing detection at scale.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

The Tactical Application Security Program - Getting Stuff Done

Practical approach to application security: lightweight team, agile methods, and operational excellence. Covers assessments, bug handling, and private bug bounty programs, with actionable advice for managers and practitioners.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Numchecker - A System Approach for Kernel Rootkit Detection

Explore NumChecker, a VMM-based framework for detecting kernel rootkits using Hardware Performance Counters. Learn about its implementation, effectiveness, and security analysis.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Multivariate Solutions to Emerging Passive DNS Challenges

Explore emerging challenges in passive DNS threat intelligence and learn multivariate solutions to overcome them, enhancing your ability to identify related malicious domains effectively.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Removing Roadblocks to Diversity

Insightful discussion on strategies to attract, retain, and promote women and minorities in cybersecurity, addressing industry challenges and sharing personal experiences to foster inclusivity and diversity.

• YouTube
• 1 hour 41 minutes
• Self-Paced
• Conference Talk

Behind the Scenes of iOS Security

Explore iOS security mechanisms including HomeKit, Auto Unlock, iCloud Keychain, Data Protection, and JIT hardening. Learn about Apple's innovative approaches to protect user data and enhance mobile security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

HTTP Cookie Hijacking in the Wild - Security and Privacy Implications

Explores security vulnerabilities in websites with partial HTTPS deployment, revealing how cookie hijacking can expose sensitive user data and functionality across major online platforms.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

AirBnBeware - Short Term Rentals Long Term Pwnage

Explore network security risks in short-term rentals, including attacks and defenses for both renters and property owners. Learn practical countermeasures to protect against potential threats in the sharing economy.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

A Lightbulb Worm

Explore the potential for worms in smart light networks, focusing on Philips Hue's security measures and advanced techniques for hacking IoT devices.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

HEIST - HTTP Encrypted Information can be Stolen Through TCP-Windows

Unveils HEIST, a browser-based attack exploiting SSL/TLS vulnerabilities without network access. Demonstrates how to leak cross-origin response sizes, enabling compression-based attacks and sensitive information extraction from popular websites.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Certificate Bypass - Hiding and Executing Malware from a Digitally Signed Executable

Innovative technique for concealing malware within digitally signed files, evading detection by security solutions. Explores PE file structure, certificate table manipulation, and memory-based execution without disk writing.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

When the Cops Come A-Knocking - Handling Technical Assistance Demands from Law Enforcement

Guidance on handling law enforcement demands for technical assistance, covering types of requests, legal authority, and response options for companies protecting user data and privacy.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The Hidden Architecture of Our Time - Why This Internet Worked, How We Could Lose It

Exploring the Internet's success, its underlying principles, and the potential threats to its architecture. Emphasizes the importance of cryptography, open networks, and hacking in shaping a functional global network.

• YouTube
• 1 hour 13 minutes
• Self-Paced
• Conference Talk