Black Hat Courses

Breaking HTTPS With BGP Hijacking

Explore BGP hijacking's impact on HTTPS security, revealing vulnerabilities in Internet routing and SSL/TLS PKI. Learn about potential exploits and prevention strategies.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

How to Hack Government - Technologists as Policy Makers

Explore how technologists can influence policy-making, focusing on the FTC's role in protecting online privacy and data security through enforcement, research, and consumer protection initiatives.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Hidden Risks of Biometric Identifiers and How to Avoid Them

Explore cutting-edge biometric technologies, their advantages, and potential risks. Learn to evaluate security, reliability, privacy, and ethical concerns for informed implementation of future identification systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

ThunderStrike 2 - Sith Strike

Explore firmware vulnerabilities in Mac systems, demonstrating software-only attacks and showcasing the potential of Mac firmware malware. Learn about shared vulnerabilities and case studies.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Internet-Scale File Analysis

Explore TOTEM and DRAKVUF systems for large-scale malware analysis, addressing challenges in file diversity, volume, and dynamic analysis through cloud-based orchestration and hardware virtualization.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Taking Event Correlation With You

Explore event correlation in cybersecurity using Giles, a compiler creating SQL-based engines. Learn to detect patterns, link records, and enhance security analysis across various scenarios.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Battle of the SKM and IUM - How Windows 10 Rewrites OS Architecture

Explore Windows 10's revolutionary OS architecture, featuring Virtual Secure Machines, Secure Kernel Mode, and Isolated User Mode. Learn how these changes enhance security and impact system design.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

The Node.js Highway - Attacks Are At Full Throttle

Explore Node.js security issues and effective measures for secure application development. Learn about weak cryptography, testing, MongoDB, and see a practical demo.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

The Little Pump Gauge That Could - Attacks Against Gas Pump Monitoring Systems

Explore attacks on gas pump monitoring systems, their vulnerabilities, and the motives behind them. Learn about honeypot deployment and prevention strategies.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

The Applications of Deep Learning on Traffic Identification

Explore deep learning for network traffic identification, covering neural networks, automatic feature learning, and anomaly detection. Improve protocol identification beyond traditional methods.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Targeted Takedowns - Minimizing Collateral Damage Using Passive DNS

Explore how Passive DNS can help investigators minimize collateral damage during cyber criminal takedowns, ensuring precise targeting and avoiding harm to innocent parties.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Server-Side Template Injection - RCE for the Modern Web App

Explore techniques to recognize and exploit template injection vulnerabilities, leading to remote code execution in web applications. Learn automated detection methods and application-specific exploits.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Emanate Like A Boss - Generalized Covert Data Exfiltration With Funtenna

Explore Funtenna, a software technique for covert data exfiltration through electromagnetic emanations in various computing devices, including its mechanisms, implementations, and implications for network security.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Exploiting the DRAM Rowhammer Bug to Gain Kernel Privileges

Explore the DRAM Rowhammer bug's security implications, from bit flips to kernel privilege escalation. Learn about exploit techniques, mitigations, and the physics behind this hardware vulnerability.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Repurposing OnionDuke - A Single Case Study Around Reusing Nation State Malware

Explore the process of reverse engineering and repurposing OnionDuke, a suspected Russian government malware, for use in other tools. Learn about malware analysis and ethical considerations in cybersecurity research.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk