Black Hat Courses

The Battle for Free Speech on the Internet

Explore the challenges and strategies for preserving online freedom of speech, examining the impact of censorship and the role of tech companies in protecting lawful content.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Spread Spectrum Satcom Hacking - Attacking The Globalstar Simplex Data Service

Explore reverse engineering and exploitation of GlobalStar's simplex satcom protocol, uncovering vulnerabilities in satellite communications and demonstrating interception and spoofing capabilities.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

FileCry - The New Age of XXE

Explore critical XXE vulnerabilities in enterprise software, including 0-day exploits in Java and Internet Explorer. Learn detection, exploitation, and prevention techniques.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Critical Vulnerabilities and Bug Bounty Programs

Explore critical vulnerabilities discovered through bug bounty programs, their impact on customers, and strategies for improving submission quality and researcher participation.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Assessing and Exploiting BigNum Vulnerabilities

Explore vulnerabilities in multi-precision integer arithmetic used in cryptography implementations. Learn bug patterns, exploitation techniques, and strategies for automated vulnerability detection.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Bypass Control Flow Guard Comprehensively

Analyze CFG's weaknesses and explore a new technique to bypass it, enabling previously prevented exploit methods and opening avenues for developing more advanced exploit techniques.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Return to Where? You Can't Exploit What You Can't Find

Explore advanced techniques for detecting and preventing memory corruption vulnerabilities, including execute-only memory and code pointer hiding, to enhance software security against sophisticated exploitation methods.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Certifi-gate - Front-Door Access To Pwning Millions Of Androids

Explore Android vulnerabilities affecting millions of devices, including Lollipop. Learn about exploits, technical root causes, and remediation strategies for these critical security flaws.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Attacking ECMAScript Engines With Redefinition

Explore vulnerabilities in ECMAScript engines through function redefinition, examining implementation differences and strategies for identifying security issues in various targets.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Abusing Silent Mitigations - Understanding Weaknesses Within Internet Explorer

Explore Internet Explorer's silent exploit mitigations, their weaknesses, and potential attack vectors. Learn techniques to bypass these security measures and gain insights into hardening browser defenses.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Why Security Data Science Matters and How It's Different

Explore security data science challenges and solutions, including machine learning for attack detection, threat intelligence, and malware analysis, with focus on overcoming unique security-specific obstacles.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Exploiting Out-of-Order Execution for Covert Cross-VM Communication

Explore a novel side channel attack exploiting CPU out-of-order execution for covert cross-VM communication in cloud environments, with live demos and mitigation techniques.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Deep Learning on Disassembly

Explore deep learning techniques applied to disassembly for malware identification, covering the process from raw binaries to model training and evaluation against active malware feeds.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Broadcasting Your Attack - Security Testing DAB Radio in Cars

Explore vulnerabilities in DAB radio systems in cars, potential security risks, and implications for automotive cybersecurity using Software Defined Radio and custom testing tools.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

ZigBee Exploited - The Good, The Bad, And The Ugly

Explore ZigBee's security vulnerabilities in IoT devices, focusing on smart home applications. Learn about weaknesses, practical exploits, and a new security-testing framework for this widespread communication standard.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk