Black Hat Courses

Reflected File Download - A New Web Attack Vector

Explore a new web attack vector that allows attackers to download malicious files from trusted domains without uploading them, potentially bypassing security measures and spreading across social networks.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Ret2dir - Deconstructing Kernel Isolation

Explore kernel exploitation technique ret2dir, bypassing isolation protections by leveraging direct-mapped memory. Learn about vulnerabilities, attack models, and mitigation strategies for Linux kernels.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Gyrophone - Eavesdropping Using a Gyroscope

Explore how smartphone gyroscopes can be exploited to eavesdrop on nearby speech, bypassing microphone permissions and posing privacy risks. Learn about potential attacks and defenses.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Next Level Cheating and Leveling Up Mitigations

Explore sophisticated attacks on anti-cheat systems in multiplayer gaming, including practical demonstrations and implications for game security and the future of cheat prevention.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Freeze Drying for Capturing Environment-Sensitive Malware Alive

Innovative techniques for capturing and analyzing environment-sensitive malware through "freeze drying" and live process migration, enabling dynamic analysis of sophisticated threats like Citadel and ZeuS/GameOver.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Abusing Software Defined Networks

Explore vulnerabilities in Software Defined Networks, including clear-text protocols, weak authentication, and open APIs. Learn to identify, exploit, and protect against these weaknesses in leading SDN platforms.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Hadoop Security - Seven Ways to Kill an Elephant

Explore Hadoop security challenges and solutions in Big Data environments. Learn seven key strategies to mitigate risks and protect sensitive information in Hadoop ecosystems.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

Industrial Control Systems - Pentesting PLCs 101

Hands-on workshop exploring ICS security, focusing on PLC vulnerabilities. Learn to assess and exploit industrial control systems using real-world examples and practical techniques.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Industrial Control Systems - Pentesting PLCs 101

Hands-on workshop exploring penetration testing techniques for industrial control systems, focusing on PLCs. Learn to identify vulnerabilities and attack Siemens and Schneider devices.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Revisiting XSS Sanitization

Explore XSS vulnerabilities in popular WYSIWYG editors and learn an effective sanitization technique using minimal characters and regular expressions to prevent attacks across various contexts.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Counterfeiting the Pipes with FakeNet 2.0

Explore network simulation for malware analysis using FakeNet 2.0. Learn to mimic protocols, configure settings, and capture network signatures efficiently in this hands-on workshop.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

WebKit Everywhere - Secure or Not?

Explore WebKit security, vulnerabilities, and exploitation techniques across platforms. Learn about security enhancements, mitigation strategies, and advanced exploit methods with real-world demos.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Session Identifier are for Now, Passwords are Forever - XSS-Based Abuse of Browser Password Managers

Explore XSS-based attacks on browser password managers, their vulnerabilities, and potential solutions. Learn about password field usage on popular websites and get recommendations for protection.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

SSL Validation Checking vs. Going to Fail

Explore SSL certificate validation vulnerabilities in mobile apps using SVF tool. Learn about testing methods, real-world results, and implications for app security.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Lessons Learned from Eight Years of Breaking Hypervisors

Explore vulnerabilities in popular hypervisors, examining security features, attack surfaces, and design flaws. Gain insights on improving hypervisor security through real-world examples and expert recommendations.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk