Black Hat Courses

Assessing and Exploiting BigNum Vulnerabilities

Explore vulnerabilities in multi-precision integer arithmetic used in cryptography implementations. Learn bug patterns, exploitation techniques, and strategies for automated vulnerability detection.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Bypass Control Flow Guard Comprehensively

Analyze CFG's weaknesses and explore a new technique to bypass it, enabling previously prevented exploit methods and opening avenues for developing more advanced exploit techniques.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Return to Where? You Can't Exploit What You Can't Find

Explore advanced techniques for detecting and preventing memory corruption vulnerabilities, including execute-only memory and code pointer hiding, to enhance software security against sophisticated exploitation methods.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Certifi-gate - Front-Door Access To Pwning Millions Of Androids

Explore Android vulnerabilities affecting millions of devices, including Lollipop. Learn about exploits, technical root causes, and remediation strategies for these critical security flaws.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Attacking ECMAScript Engines With Redefinition

Explore vulnerabilities in ECMAScript engines through function redefinition, examining implementation differences and strategies for identifying security issues in various targets.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Abusing Silent Mitigations - Understanding Weaknesses Within Internet Explorer

Explore Internet Explorer's silent exploit mitigations, their weaknesses, and potential attack vectors. Learn techniques to bypass these security measures and gain insights into hardening browser defenses.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Why Security Data Science Matters and How It's Different

Explore security data science challenges and solutions, including machine learning for attack detection, threat intelligence, and malware analysis, with focus on overcoming unique security-specific obstacles.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Exploiting Out-of-Order Execution for Covert Cross-VM Communication

Explore a novel side channel attack exploiting CPU out-of-order execution for covert cross-VM communication in cloud environments, with live demos and mitigation techniques.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Deep Learning on Disassembly

Explore deep learning techniques applied to disassembly for malware identification, covering the process from raw binaries to model training and evaluation against active malware feeds.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Broadcasting Your Attack - Security Testing DAB Radio in Cars

Explore vulnerabilities in DAB radio systems in cars, potential security risks, and implications for automotive cybersecurity using Software Defined Radio and custom testing tools.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

ZigBee Exploited - The Good, The Bad, And The Ugly

Explore ZigBee's security vulnerabilities in IoT devices, focusing on smart home applications. Learn about weaknesses, practical exploits, and a new security-testing framework for this widespread communication standard.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

How to Implement IT Security After a Cyber Meltdown

Implementing IT security post-cyber attack: strategies, challenges, and lessons learned from Saudi Aramco's 2012 incident and subsequent security unit establishment at Aramco Overseas Company.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Bringing A Cannon To A Knife Fight

Explore China's Great Cannon: its inception, functionality as a Man-in-the-Middle proxy, weaponization of users, political motivations, and future implications. Learn protective measures against this powerful censorship tool.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

ROPInjector - Using Return Oriented Programming for Polymorphism and Antivirus Evasion

Explore advanced polymorphism techniques using Return Oriented Programming for antivirus evasion, with practical demonstrations of the ROPInjector tool and its effectiveness against detection methods.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

How Vulnerable Are We to Scams?

Explore the evolving landscape of Internet scams, their increasing sophistication, and user vulnerability. Learn about targeted attacks, spam filter effectiveness, and factors influencing scam susceptibility.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk