Black Hat Courses

Optimized Fuzzing IOKit in iOS

Optimized fuzzing approach for iOS IOKit interfaces, dynamically resolving symbols and parameters to improve efficiency and effectiveness in vulnerability discovery.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Adventures in Femtoland - 350 Yuan for Invaluable Fun

Explore vulnerabilities in 3G/4G networks using femtocells. Learn to intercept data and exploit weaknesses in UMTS infrastructure, from unboxing to proof-of-concept demonstrations.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Internet Plumbing for Security Professionals - The State of BGP Security

Explore BGP security, its vulnerabilities, and practical countermeasures to build trust in the Internet's foundation. Learn about routing leaks, hijacking risks, and implementation strategies for a more secure network infrastructure.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Abusing XSLT for Practical Attacks

Explore XSLT vulnerabilities and practical attacks on XML systems, including arithmetic manipulation, code logic failure, and compromising user confidentiality in web browsers.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

When IoT Attacks - Hacking a Linux-Powered Rifle

Explore the security vulnerabilities of a Linux-powered precision rifle, including reverse engineering, attack surfaces, and implications of network-connected firearms.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Forging the USB Armory - An Open Source Secure Flash-Drive-Sized Computer

Explore the creation of a secure, open-source computer the size of a flash drive. Learn about innovative hardware design and advanced security features for portable computing.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Breaking Access Controls With BLEKey

Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Web Timing Attacks Made Practical

Explore practical web timing attacks, improving data collection and statistical analysis for more effective penetration testing. Learn adaptive techniques and open-source tools for identifying cryptographic vulnerabilities.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

CrackLord - Maximizing Password Cracking Boxes

Explore distributed password cracking with CrackLord, a scalable system for load balancing GPU and CPU resources across multiple hardware systems, enhancing efficiency and accessibility.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Subverting Satellite Receivers for Botnet and Profit

Exploiting vulnerabilities in satellite receivers to build botnets, highlighting risks in DVB-CA encryption, custom plugins, and CCCAM protocol. Demonstrates potential for large-scale network compromise and unauthorized access.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Faux Disk Encryption - Realities of Secure Storage on Mobile Devices

Explore mobile device data security challenges, debunk full-disk encryption myths, and learn sophisticated secure storage techniques for iOS and Android, addressing real-world application vulnerabilities.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Compromising the Windows Enterprise Via Windows Update

Exploración de vulnerabilidades en Windows Update y WSUS, demostrando cómo comprometer sistemas empresariales mediante actualizaciones maliciosas y controladores de dispositivos USB.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Data-Driven Threat Intelligence - Metrics on Indicator Dissemination and Sharing

Análisis basado en datos de indicadores de inteligencia de amenazas y comunidades de intercambio, explorando eficiencia, calidad y superposición de fuentes durante más de un año.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

How to Hack Government - Technologists as Policy Makers

Explore how technologists can influence policy-making, focusing on the FTC's role in protecting online privacy and data security through enforcement, research, and consumer protection initiatives.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Hidden Risks of Biometric Identifiers and How to Avoid Them

Explore cutting-edge biometric technologies, their advantages, and potential risks. Learn to evaluate security, reliability, privacy, and ethical concerns for informed implementation of future identification systems.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk