Black Hat Courses

Automated Human Vulnerability Scanning With AVA

Explore automated human vulnerability scanning with AVA, a tool for mapping people's connectivity, testing security threats, and measuring behavior to address human security risks.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Defeating Machine Learning - What Your Security Vendor Is Not Telling You

Explore attacker strategies to defeat machine learning-based security defenses, analyze industry issues enabling these vulnerabilities, and discover novel data sourcing solutions for improved protection.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

The NSA Playset - A Year of Toys and Tools

Explore NSA-inspired gadgets for USB, PCI Express, I2C, GSM, Bluetooth, and RF retroreflectors. Learn about tools mimicking intelligence agency capabilities for electronic device eavesdropping and surveillance.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Defeating Pass-the-Hash - Separation of Powers

Explore Windows 10's innovative approach to defeating Pass-the-Hash attacks through strong isolation of symmetric credentials, leveraging virtualization technology to sequester secrets from potential attackers.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Cloning 3G - 4G SIM Cards With A PC And An Oscilloscope - Lessons Learned In Physical Security

Reveals vulnerabilities in 3G/4G SIM cards, demonstrating how to clone them using differential power analysis. Discusses implications for mobile network security and showcases practical experiments.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Abusing Windows Management Instrumentation - WMI

Explore WMI's potential for stealthy, persistent attacks on Windows systems. Learn offensive techniques, backdoor creation, and defense strategies against WMI-based threats.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Remote Exploitation of an Unaltered Passenger Vehicle

Comprehensive exploration of remote vehicle hacking, demonstrating real-world attacks on unaltered cars and pivoting through hardware to send CAN bus messages affecting critical systems.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Red Vs. Blue - Modern Active Directory Attacks, Detection, And Protection

Explore advanced Active Directory attack methods, detection techniques for Golden and Silver Tickets, and effective mitigation strategies. Learn to identify and protect against sophisticated network intrusions.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Writing Badass Malware for OS X

Explore advanced OS X malware techniques, persistence methods, and security bypasses. Learn to create sophisticated threats and enhance Mac protection against current and future malware.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Harnessing Intelligence From Malware Repositories

Explore techniques for extracting intelligence from malware repositories using program analysis and data mining, with insights on connecting seemingly disparate cyber attacks and tracking malware trends.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Rocking the Pocket Book - Hacking Chemical Plant for Competition and Extortion

Explore techniques for exploiting chemical plant systems to cause economic damage while avoiding detection. Learn about attack stages, cost considerations, and creating misleading forensic evidence.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Is the NSA Still Listening to Your Phone Calls? - A Surveillance Debate

Debate on NSA surveillance practices, focusing on Section 215 of the Patriot Act and recent reforms. Explores impact on privacy, national security, and the effectiveness of congressional oversight.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

How the Wassenaar Arrangement's Export Control of "Intrusion Software" Affects Industry

Experts discuss implications of Wassenaar Arrangement's export control on "intrusion software" for cybersecurity industry, research, and privacy, drawing parallels to 1990s crypto wars.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Remote Physical Damage 101 - Bread and Butter Attacks

Explore cyber-physical attacks on industrial systems, including generic "bread and butter" techniques and mitigation strategies beyond network security.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Graphic Content Ahead - Towards Automated Scalable Analysis of Graphical Images Embedded in Malware

Explores automated analysis of images in malware, focusing on identifying visually similar samples and classifying images into categories to enhance malware triage and reveal attacker patterns.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk