Black Hat Courses

ThunderStrike 2 - Sith Strike

Explore firmware vulnerabilities in Mac systems, demonstrating software-only attacks and showcasing the potential of Mac firmware malware. Learn about shared vulnerabilities and case studies.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Internet-Scale File Analysis

Explore TOTEM and DRAKVUF systems for large-scale malware analysis, addressing challenges in file diversity, volume, and dynamic analysis through cloud-based orchestration and hardware virtualization.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Taking Event Correlation With You

Explore event correlation in cybersecurity using Giles, a compiler creating SQL-based engines. Learn to detect patterns, link records, and enhance security analysis across various scenarios.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Battle of the SKM and IUM - How Windows 10 Rewrites OS Architecture

Explore Windows 10's revolutionary OS architecture, featuring Virtual Secure Machines, Secure Kernel Mode, and Isolated User Mode. Learn how these changes enhance security and impact system design.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

The Node.js Highway - Attacks Are At Full Throttle

Explore Node.js security issues and effective measures for secure application development. Learn about weak cryptography, testing, MongoDB, and see a practical demo.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

The Little Pump Gauge That Could - Attacks Against Gas Pump Monitoring Systems

Explore attacks on gas pump monitoring systems, their vulnerabilities, and the motives behind them. Learn about honeypot deployment and prevention strategies.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

The Applications of Deep Learning on Traffic Identification

Explore deep learning for network traffic identification, covering neural networks, automatic feature learning, and anomaly detection. Improve protocol identification beyond traditional methods.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Targeted Takedowns - Minimizing Collateral Damage Using Passive DNS

Explore how Passive DNS can help investigators minimize collateral damage during cyber criminal takedowns, ensuring precise targeting and avoiding harm to innocent parties.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Server-Side Template Injection - RCE for the Modern Web App

Explore techniques to recognize and exploit template injection vulnerabilities, leading to remote code execution in web applications. Learn automated detection methods and application-specific exploits.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Emanate Like A Boss - Generalized Covert Data Exfiltration With Funtenna

Explore Funtenna, a software technique for covert data exfiltration through electromagnetic emanations in various computing devices, including its mechanisms, implementations, and implications for network security.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Exploiting the DRAM Rowhammer Bug to Gain Kernel Privileges

Explore the DRAM Rowhammer bug's security implications, from bit flips to kernel privilege escalation. Learn about exploit techniques, mitigations, and the physics behind this hardware vulnerability.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Repurposing OnionDuke - A Single Case Study Around Reusing Nation State Malware

Explore the process of reverse engineering and repurposing OnionDuke, a suspected Russian government malware, for use in other tools. Learn about malware analysis and ethical considerations in cybersecurity research.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

TrustKit - Code Injection on iOS 8 for the Greater Good

Explore iOS 8's new code packaging rules and their impact on security. Learn about TrustKit, an open-source library for easy SSL public key pinning implementation in iOS apps without source code modification.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Bring Back the Honeypots

Explore modern honeypot techniques for enhanced network security. Learn about application traps, booby-trapped documents, and cloud-based deception to detect and prevent breaches effectively.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Big Game Hunting - The Peculiarities of Nation-State Malware Research

Explore nation-state malware research, focusing on attribution challenges and novel techniques for linking binaries. Gain insights into the complexities of threat intelligence and state-sponsored cyber espionage.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk