Black Hat Courses

Well, That Escalated Quickly! How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass and Persistence in the Hypervisor via Shadow Containers

Explore Docker API vulnerabilities leading to remote code execution, same-origin bypass, and hypervisor persistence via shadow containers. Gain insights into containerization security risks and mitigation strategies.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Developing Trust and Gitting Betrayed

Explore trust relationships in business, analyzing vulnerabilities and exploitation techniques. Learn to identify, manage, and secure critical trust points in code, platforms, and organizational structures.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Network Automation is Not Your Safe Haven - Protocol Analysis and Vulnerabilities of Autonomic Network

Explores vulnerabilities in autonomic networks, focusing on Cisco's "Plug and Play" routers. Analyzes protocols and potential security risks in automated network systems.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Digital Vengeance - Exploiting the Most Notorious C&C Toolkits

Explore notorious command and control toolkits used in targeted attacks, learn about their vulnerabilities, and discover techniques to exploit and defend against these sophisticated threats.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Infecting the Enterprise - Abusing Office365 + Powershell for Covert C2

Explore potential security risks of Office365 adoption and learn how malicious actors can exploit these vulnerabilities for covert command and control using PowerShell in enterprise environments.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Breaking the Laws of Robotics - Attacking Industrial Robots

Explore vulnerabilities in industrial robots, their embedded controllers, and network connections. Learn about potential security risks in modern factory automation systems.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Why Most Cyber Security Training Fails and What We Can Do About It

Explores limitations of current cybersecurity awareness training and proposes innovative solutions to enhance effectiveness against spear phishing and other cyber threats.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Exploiting Network Printers

Discover vulnerabilities in network printers and learn how to exploit them for unauthorized access to confidential data in corporate environments.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Bochspwn Reloaded - Detecting Kernel Memory Disclosure with x86 Emulation and Taint Tracking

Explore kernel memory disclosure detection using x86 emulation and taint tracking. Learn about buffer overflows, memory corruption, and user-mode client interactions in kernel-mode systems.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

How We Created the First SHA-1 Collision and What it Means for Hash Security

Explore the creation of the first SHA-1 collision, its implications for hash security, and the challenges faced in developing a meaningful payload and scaling computation.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Behind the Plexiglass Curtain - Stats and Stories from the Black Hat NOC

Insider insights into Black Hat's network operations: statistics, anecdotes, and revelations from the Network Operations Center team's annual debrief.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Insecurity in Building Automation - How to Create Dark Buildings with Light Speed

Explore vulnerabilities in building automation systems, their potential for exploitation, and the implications for physical security in modern infrastructure.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

An ACE Up the Sleeve - Designing Active Directory DACL Backdoors

Explore Active Directory DACL backdoors, their offensive potential, and stealth techniques. Learn about control relationships, elevation paths, and persistence methods in AD objects.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Cracking the Lens - Targeting HTTP's Hidden Attack-Surface

Explore hidden attack surfaces in modern web infrastructure, focusing on transparent systems for performance and analytics. Learn to identify and exploit overlooked vulnerabilities.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Stepping Up Our Game - Re-focusing the Security Community on Defense and Making Security Work for Everyone

Facebook CSO Alex Stamos discusses the evolving role of cybersecurity, emphasizing the need for a renewed focus on defense and making security accessible to all in an era of heightened digital risks and societal impact.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Conference Talk