Black Hat Courses

Behind The Mask - The Agenda, Tricks, And Tactics Of The Federal Trade Commission As They Regulate Cybersecurity

Insider's expose of FTC's cybersecurity regulation tactics, revealing government overreach and bullying practices. Highlights whistleblower case, Congressional investigation, and implications for businesses facing federal scrutiny.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Stranger Danger - What Is The Risk From 3rd Party Libraries

Explore the risks of third-party libraries in software, analyzing vulnerability metrics and exposure times. Learn strategies to mitigate risks and improve security practices in your organization.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

These Are Not Your Grand Daddy's CPU Performance Counters - CPU Hardware Performance Counters For Security

Explore advanced CPU performance counters for enhanced platform security, including RowHammer defense and ROP mitigation. Learn practical techniques with real-world exploit demonstrations and performance impact analysis.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Unicorn - Next Generation CPU Emulator Framework

Versatile CPU emulator framework supporting multiple architectures and platforms. Offers clean API, thread-safety, and language bindings for building advanced security tools and research.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Understanding and Managing Entropy Usage

Explore cryptographic entropy usage, sources, and management across systems. Learn to analyze and improve random number generation for enhanced security in modern IT infrastructures.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

API Deobfuscator - Resolving Obfuscated API Functions in Modern Packers

Uncover obfuscated API functions in modern packers using memory access analysis and iterative run-until-API methods. Learn techniques to deobfuscate Themida 32/64 packed binaries for effective malware analysis.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Using Static Binary Analysis to Find Vulnerabilities and Backdoors in Firmware

Explore techniques for detecting vulnerabilities and backdoors in embedded device firmware using static binary analysis, focusing on challenges and automated solutions for complex binary blobs.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Understanding the Attack Surface and Attack Resilience of Project Spartan's New EdgeHTML Rendering Engine

Explore EdgeHTML's attack surface, compare it with MSHTML, and analyze exploit mitigations in Windows 10's new rendering engine for enhanced web security understanding.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Breaking Honeypots for Fun and Profit

Explore techniques to detect, bypass, and exploit honeypot technologies, turning defensive tools against defenders. Includes global honeypot mapping and vulnerability analysis.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Staying Persistent in Software Defined Networks

Explore vulnerabilities in software-defined networks, focusing on ONIE and network operating systems. Learn about potential exploits, malware persistence, and strategies for securing control plane networks.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Bypass Surgery - Abusing Content Delivery Networks

Exploring vulnerabilities in CDNs, this talk reveals attack patterns against high-availability websites, demonstrating potential risks and exploit development with far-reaching consequences.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Exploiting XXE Vulnerabilities in File Parsing Functionality

Techniques for exploiting XXE vulnerabilities in file parsing, focusing on XML-supported formats like docx and xlsx. Includes real-world examples and introduces a tool for creating 'XXE backdoored' files.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Mobile Point of Scam - Attacking the Square Reader

Explores vulnerabilities in Square Reader devices, revealing potential for fraudulent transactions and credit card skimming through software flaws and hardware modifications in mobile point-of-sale systems.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Distributing the Reconstruction of High-Level Intermediate Representation

Explore distributed reverse engineering techniques using intermediate representation in a clustered environment to analyze malware, extract characteristics, and improve threat intelligence initiatives.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

The Tactical Application Security Program - Getting Stuff Done

Aprenda a implementar um programa de segurança tático e eficaz, focando em avaliações ágeis, resposta a incidentes e gerenciamento de bugs. Descubra por que abordagens táticas podem ser mais efetivas que estratégias de longo prazo.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk