Black Hat Courses

Remote Physical Damage 101 - Bread and Butter Attacks

Explore cyber-physical attacks on industrial systems, including generic "bread and butter" techniques and mitigation strategies beyond network security.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Graphic Content Ahead - Towards Automated Scalable Analysis of Graphical Images Embedded in Malware

Explores automated analysis of images in malware, focusing on identifying visually similar samples and classifying images into categories to enhance malware triage and reveal attacker patterns.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Optimized Fuzzing IOKit in iOS

Optimized fuzzing approach for iOS IOKit interfaces, dynamically resolving symbols and parameters to improve efficiency and effectiveness in vulnerability discovery.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Adventures in Femtoland - 350 Yuan for Invaluable Fun

Explore vulnerabilities in 3G/4G networks using femtocells. Learn to intercept data and exploit weaknesses in UMTS infrastructure, from unboxing to proof-of-concept demonstrations.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Internet Plumbing for Security Professionals - The State of BGP Security

Explore BGP security, its vulnerabilities, and practical countermeasures to build trust in the Internet's foundation. Learn about routing leaks, hijacking risks, and implementation strategies for a more secure network infrastructure.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Abusing XSLT for Practical Attacks

Explore XSLT vulnerabilities and practical attacks on XML systems, including arithmetic manipulation, code logic failure, and compromising user confidentiality in web browsers.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

When IoT Attacks - Hacking a Linux-Powered Rifle

Explore the security vulnerabilities of a Linux-powered precision rifle, including reverse engineering, attack surfaces, and implications of network-connected firearms.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Forging the USB Armory - An Open Source Secure Flash-Drive-Sized Computer

Explore the creation of a secure, open-source computer the size of a flash drive. Learn about innovative hardware design and advanced security features for portable computing.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Breaking Access Controls With BLEKey

Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Web Timing Attacks Made Practical

Explore practical web timing attacks, improving data collection and statistical analysis for more effective penetration testing. Learn adaptive techniques and open-source tools for identifying cryptographic vulnerabilities.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

CrackLord - Maximizing Password Cracking Boxes

Explore distributed password cracking with CrackLord, a scalable system for load balancing GPU and CPU resources across multiple hardware systems, enhancing efficiency and accessibility.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Subverting Satellite Receivers for Botnet and Profit

Exploiting vulnerabilities in satellite receivers to build botnets, highlighting risks in DVB-CA encryption, custom plugins, and CCCAM protocol. Demonstrates potential for large-scale network compromise and unauthorized access.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Faux Disk Encryption - Realities of Secure Storage on Mobile Devices

Explore mobile device data security challenges, debunk full-disk encryption myths, and learn sophisticated secure storage techniques for iOS and Android, addressing real-world application vulnerabilities.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Compromising the Windows Enterprise Via Windows Update

Exploración de vulnerabilidades en Windows Update y WSUS, demostrando cómo comprometer sistemas empresariales mediante actualizaciones maliciosas y controladores de dispositivos USB.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Data-Driven Threat Intelligence - Metrics on Indicator Dissemination and Sharing

Análisis basado en datos de indicadores de inteligencia de amenazas y comunidades de intercambio, explorando eficiencia, calidad y superposición de fuentes durante más de un año.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk