Black Hat Courses

Abusing CNC Technologies

Explore vulnerabilities in modern CNC machines, including network security risks, code leaks, and potential for sabotage. Learn about countermeasures to protect critical industrial assets.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Blind VCC Glitching Technique to Bypass the Secure Boot of Qualcomm MSM8916 Mobile SoC

Explore a blind VCC glitching technique to bypass secure boot mechanisms on mobile SoCs, demonstrated on Qualcomm MSM8916/APQ8016. Learn practical application and see a live demo of this effective method.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

The Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?

Explore ethical challenges and solutions in handling social engineering pentest aftermath, focusing on responsibility, consequences, and improving security culture.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Demystifying AI and Machine Learning to Enhance SOC Detection

Demystifies AI and machine learning for SOC teams, focusing on practical applications like data leak prevention. Includes live demo and insights from Credit Agricole's SOC experience.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Searching for RPC Functions to Coerce Authentications in Microsoft Protocols

Automated discovery of RPC functions in Microsoft protocols to find authentication coercion vulnerabilities, with focus on parsing documentation and generating proof-of-concept code.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Our Kryptonite - A Defendable Internet

Exploring the challenges and potential solutions for creating a defendable Internet, examining incentives, economics, and the balance between security and openness in the digital landscape.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Strengthening Cyber Resiliency in a Time of Geopolitical Crises - Applying Threat Intelligence and Active Defense to Protecting Critical Information Infrastructures

Explore strategies for enhancing cyber resilience during geopolitical crises, focusing on threat intelligence and active defense to protect critical information infrastructures.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Unwinding the Stack for Fun and Profit

Explore stack-based buffer overflow exploitation techniques, bypassing modern mitigations by leveraging exception handling mechanisms to resurrect old exploits and achieve successful attacks.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Cybersecurity - The Next Generation

Exploring cybersecurity's evolution, challenges, and future direction. Discusses lessons from the past, current trends, and strategies for shaping the industry's destiny in an increasingly connected world.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

IAM The One Who Knocks

Exposing hidden risks in multi-cloud IAM, detailing access flaws, misconfigurations, and inconsistencies that can lead to unintended access and privilege escalation across cloud providers.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

I Am Whoever I Say I Am - Infiltrating Identity Providers Using a 0-Click Exploit

Explore unauthenticated remote code execution in popular IAM solutions, covering past attacks, audit approaches, and vulnerability chaining for infiltrating identity providers.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Human or Not - Can You Really Detect the Fake Voices?

Explore AI-synthesized speech detection techniques and their real-world effectiveness in combating voice cloning and fake audio. Uncover challenges and limitations in current approaches.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Leveraging the Apple ESF for Behavioral Detections

Explore Apple's Endpoint Security Framework for macOS threat detection. Learn to utilize ESF data for basic and advanced behavioral-based detections, comparing old and new detection methods.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Let's Dance in the Cache - Destabilizing Hash Table on Microsoft IIS

Explore Microsoft IIS's Dynamic Hashing algorithm and its vulnerabilities. Learn about potential collision attacks on hash tables in web server architecture and their implications for cybersecurity.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Is WebAssembly Really Safe? - Wasm VM Escape and RCE Vulnerabilities Have Been Found in New Way

Explore WebAssembly security vulnerabilities through a new fuzzing framework, focusing on VM escape and RCE risks in Wasm runtimes for edge computing and web applications.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk