Black Hat Courses

TrustKit - Code Injection on iOS 8 for the Greater Good

Explore iOS 8's new code packaging rules and their impact on security. Learn about TrustKit, an open-source library for easy SSL public key pinning implementation in iOS apps without source code modification.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Bring Back the Honeypots

Explore modern honeypot techniques for enhanced network security. Learn about application traps, booby-trapped documents, and cloud-based deception to detect and prevent breaches effectively.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Big Game Hunting - The Peculiarities of Nation-State Malware Research

Explore nation-state malware research, focusing on attribution challenges and novel techniques for linking binaries. Gain insights into the complexities of threat intelligence and state-sponsored cyber espionage.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Stagefright - Scary Code in the Heart of Android

Exploring Android's Stagefright framework vulnerabilities, focusing on discovery techniques, OS internals, and security implications. Demonstrates proof-of-concept code and discusses mitigation strategies.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Dance Like Nobody's Watching - Encrypt Like Everyone Is - A Peek Inside the Black Hat Network

Explore the inner workings of the Black Hat network, one of the most hostile environments created. Learn about its planning, deployment, and maintenance, as well as the unique challenges it faces.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

The Lifecycle of a Revolution

Exploring the evolution of the internet, from idealistic beginnings to current challenges, and examining future trends in digital security, privacy, and freedom.

• YouTube
• 1 hour 11 minutes
• Self-Paced
• Conference Talk

Bringing a Machete to the Amazon

Explore AWS security challenges, vulnerabilities, and solutions. Learn assessment techniques and tools to protect your cloud infrastructure and applications.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Lights Off - The Darkness of the Smart Meters

Explore security vulnerabilities in smart power meters, including remote control capabilities and potential risks. Learn about device reverse engineering and its implications for connected home technology.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Exploring Yosemite - Abusing Mac OS X 10.10

Comprehensive analysis of Mac OS X 10.10 Yosemite's security features, demonstrating vulnerabilities, offensive techniques, and introducing a new security tool for detecting rootkits and abnormalities.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

C++11 Metaprogramming Applied to Software Obfuscation

Explore advanced C++11 metaprogramming techniques for software obfuscation, including compile-time code generation, polymorphism, and practical applications like string encryption and call obfuscation.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Two Factor Failure

Explore vulnerabilities in Two-Factor Authentication systems, including a new attack on mobile TOTP. Learn best practices for secure 2FA deployment in enterprise and web applications.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

PDF Attack - A Journey from the Exploit Kit to the Shellcode

Explore advanced PDF exploitation techniques, from obfuscated JavaScript analysis to shellcode extraction. Learn to modify and obfuscate malicious PDFs for pentesting and understand cybercriminals' latest tricks.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Conference Talk

Evasion of High-End IDPS Devices at the IPv6 Era

Explore IPv6 security vulnerabilities and evasion techniques against high-end IDPS devices, with demonstrations and proposed mitigation strategies for network protection.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Scala Security - Examining the Play and LiftWeb Frameworks

Explore security aspects of Scala's Play and LiftWeb frameworks, including OWASP Top 10 vulnerabilities, exploitation mitigations, and a new Scala library for SSRF prevention.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Attacking the Linux PRNG on Android

Explore vulnerabilities in Android's Linux PRNG, focusing on early boot attacks and real-world exploitation vectors. Learn about potential security risks and mitigations for embedded platforms.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk