Black Hat Courses

FPs Are Cheap - Show Me the CVEs

Evaluating SAST tools: Learn how to assess their effectiveness in finding real vulnerabilities using synthetic test suites and practical examples of CVEs.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Shield with Hole - New Security Mitigation Helps Us Escape Chrome Sandbox to Exfiltrate User Privacy

Explore how new security measures in Chrome can be exploited to bypass the sandbox and compromise user privacy, revealing potential vulnerabilities in browser protection mechanisms.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Graph Convolutional Network-Based Suspicious Communication Pair Estimation for Industrial Control Systems

Explore graph convolutional networks for detecting suspicious communication pairs in industrial control systems, enhancing security monitoring beyond traditional whitelisting methods.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

The Subtle Art of Chaining Headers - IKEv2 Attack Surface Case Study

Explore IKEv2 attack surface through header chaining, uncovering vulnerabilities in IPsec VPNs. Learn techniques for identifying and exploiting weaknesses in Internet Key Exchange implementations.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Fingerprint-Jacking - Practical Fingerprint Authorization Hijacking in Android Apps

Practical exploration of fingerprint authorization vulnerabilities in Android apps, demonstrating attack techniques and suggesting mitigation strategies for developers.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Light Commands - Hacking Voice Assistants with Lasers

Explore how lasers can manipulate voice-activated IoT devices, revealing potential security vulnerabilities in smart home technology and microphone systems.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Design Pitfalls in Commercial Mini-Programs on Android and iOS

Explore security vulnerabilities in app-in-app paradigms for Android and iOS, focusing on mini-programs' design flaws and potential risks to user privacy and data protection.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

A New Hope - The One Last Chance to Save Your SSD Data

Explore SSD data recovery techniques, uncovering hidden management methods and confidential controller information to maximize chances of retrieving lost data from solid-state drives.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Quantum Security and Cryptography - You Are - Probably - Doing it Wrong

Explore quantum cryptography beyond basic qubit exchange, delving into exotic applications and quantum effects for securing information that traditional cryptography cannot achieve.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

My Ticks Don't Lie - New Timing Attacks for Hypervisor Detection

Explore new timing attacks for hypervisor detection, crucial for sandbox evasion in malware analysis. Learn about hardware-assisted virtualization vulnerabilities and low-level measurement techniques.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

It's Not Finished - The Evolving Maturity in Ransomware Operations

Explore the evolving sophistication of ransomware operations, focusing on European targets, attack strategies, and the lifecycle of Rival ransomware. Learn about emerging trends and future threats in cybersecurity.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Hermes Attack - Steal DNN Models in AI Privatization Deployment Scenarios

Unveils a novel attack exploiting PCIe bus vulnerabilities to reconstruct DNN models in AI privatization scenarios, discussing challenges, techniques, and countermeasures.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

CDPwn - Taking Over Millions of Enterprise-Things with Layer 2 Zero-Days

Unveiling critical zero-day vulnerabilities in layer 2 protocols, demonstrating their impact on enterprise device and network security, and exploring potential exploitation techniques.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

What the Log - So Many Events, So Little Time

Explore Windows Event Log for efficient adversary detection, leveraging automation and MITRE ATT&CK framework to enhance cybersecurity monitoring and response capabilities.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Conclusions and Key Takeaways from Day 1

Insightful discussion on pressing InfoSec issues, including COVID-19 impact, security breaches, misinformation, and digital asset protection, featuring Black Hat Review Board members.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk