Black Hat Courses

Mapping the Wireless IoT

Explore wireless IoT security challenges, signal identification techniques, and best practices for revealing unknown signals. Includes a demo of a new tool for mapping radio spectrum and identifying devices.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Break Out of The Truman Show - Active Detection and Escape of Dynamic Binary Instrumentation

Explore active detection techniques for Dynamic Binary Instrumentation, focusing on exploiting weaknesses and escaping control. Learn to identify and overcome DBI environments in cybersecurity.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Rapid Radio Reversing

Explore wireless security research techniques combining SDR and non-SDR tools. Learn efficient reverse engineering processes for analyzing and decoding radio signals in this hands-on demonstration.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Enterprise Apps - Bypassing the iOS Gatekeeper

Explore iOS security vulnerabilities through enterprise apps, examining real-world statistics and a zero-day attack that bypasses Apple's gatekeeper, revealing critical flaws in the iOS security model.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

A New CVE-2015-0057 Exploit Technology

Explores CVE-2015-0057 vulnerability, User Mode Callback mechanism, and new exploit techniques in Windows kernel. Analyzes exploit methodology, vulnerability detection, and implications for system security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

DSCompromised - A Windows DSC Attack Framework

Explore a PowerShell toolkit leveraging Windows Desired State Configuration for command-and-control, malware persistence, and automatic re-infection. Learn attack techniques and defensive strategies.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Cantact - An Open Tool for Automotive Exploitation

Explore CANtact, an open-source tool for automotive network analysis. Learn to view, decode, and manipulate CAN bus traffic for reverse engineering and security testing of vehicle systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Hacking a Professional Drone

Explore vulnerabilities in professional drones and learn how to exploit them to take control. Discover practical fixes and remediation approaches for these security compromises.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

PLC-Blaster - A Worm Living Solely in the PLC

Demonstration of a self-contained PLC worm targeting Siemens S7-1200 PLCs, showcasing network scanning, self-propagation, and remote control capabilities while evading detection.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Android Commercial Spyware Disease and Medication

Explores Android vulnerabilities exploited by spyware and proposes a detection method using fuzz testing to mitigate risks and protect user privacy on smartphones.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Automated Dynamic Firmware Analysis at Scale - A Case Study on Embedded Web Interfaces

Automated framework for discovering vulnerabilities in embedded web interfaces through dynamic firmware analysis. Validates effectiveness on 1925 firmware images from 54 vendors, uncovering critical security flaws.

• YouTube
• 1 hour 8 minutes
• Self-Paced
• Conference Talk

The Kitchen's Finally Burned Down - DLP Security Bakeoff

Explore flaws in Data Loss Prevention solutions, including administrative interfaces and inspection engines, to understand their capabilities and shortcomings in protecting sensitive information.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Su-A-Cyder - Homebrewing Malware for IOS Like a BO$$

Hands-on workshop for developing iOS malware using the su-A-Cyder framework. Learn techniques to create and execute malware samples on Apple devices, exploiting recent policy changes.

• YouTube
• 2 hours 39 minutes
• Self-Paced
• Conference Talk

Automated Detection of Firefox Extension-Reuse Vulnerabilities

Discover a novel extension-reuse vulnerability in Firefox and learn about CROSSFIRE, a static analyzer that detects these vulnerabilities and generates exploit templates for rapid proof-of-concept creation.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

The Security Wolf of Wall Street - Fighting Crime With High-Frequency Classification

Explore real-time threat detection using machine learning on massive DNS data. Learn about Avalanche stream processing and NLP-Rank for automated phishing detection at scale.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk