Black Hat Courses

Analyzing UEFI BIOSes from Attacker & Defender Viewpoints

Explore UEFI BIOS analysis from attacker and defender perspectives, covering key concepts like UEFI boot phases, firmware storage, and security implications for effective reverse engineering of modern PC firmware.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Conference Talk

Blended Web and Database Attacks on Real-Time, In-Memory Platforms

Explore innovative attack vectors on real-time, in-memory platforms, blending web and database vulnerabilities. Learn about new SQL injection techniques, server-side JavaScript exploits, and R-based attacks in SAP HANA.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Firmware.RE - Firmware Unpacking, Analysis and Vulnerability-Discovery as a Service

Large-scale analysis of firmware images reveals vulnerabilities across embedded systems, highlighting security challenges and the need for improved tools and techniques in firmware analysis.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

DTM Components - Shadow Keys to the ICS Kingdom

Explore vulnerabilities in industrial control system components, focusing on DTM technology used in critical industries. Learn about security flaws and their implications for field devices.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Hack Your ATM with Friend's Raspberry Pi

Explore ATM vulnerabilities and hacking techniques using Raspberry Pi, focusing on device interfaces and communication protocols. Learn about potential security risks and countermeasures in ATM systems.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells

Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

PDF Attack - A Journey from the Exploit Kit to the Shellcode

Explore PDF-based attacks, from exploit kits to shellcode analysis. Learn to extract and analyze obfuscated JavaScript, modify malicious PDFs, and understand cybercriminal techniques using peepdf tool.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

A Practical Attack Against VDI Solutions

Demonstration of a proof-of-concept attack exploiting screen scraping to bypass VDI security measures, highlighting vulnerabilities in secure BYOD solutions.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Charge Your Device with the Latest Malware

Exposición de vulnerabilidades USB en sistemas Android personalizados, con demostración de ataque y escenario práctico, revelando implicaciones y logrando acceso root.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Hacking the Wireless World with Software Defined Radio - 2.0

Explore RF spectrum analysis, reverse engineering wireless systems, and hacking techniques using software-defined radio. Learn to decode satellite communications, track aircraft, and monitor ACARS.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Quantified Self - A Path to Self-Enlightenment or Just a Security Nightmare

Explore the security risks and privacy concerns of Quantified Self technology, including data leaks, tracking vulnerabilities, and best practices for protecting personal information.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

The Power of Pair - One Template that Reveals 100+ UAF IE Vulnerabilities

Discover a unique fuzzing strategy that revealed over 100 IE use-after-free vulnerabilities. Learn about the vulnerability hunting system and techniques used to find critical browser security flaws.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Quantum Key Distribution and the Future of Encryption

Explore quantum key distribution and its role in future encryption, covering quantum mechanics basics, algorithms, and real-world experiments to ensure data security in the quantum computing era.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

How to Find Bugs in USB Device Drivers

Explore USB device driver vulnerabilities using vUSBf framework. Learn about fuzzing techniques, bug detection, and potential security risks in USB implementations across various operating systems.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Secure Digital Communications for Our Modern Dystopia

Secure communication system for hostile environments, leveraging NASA's Disruption-Tolerant Networking for activists, refugees, and trolls. Embraces high-throughput physical data transfer methods.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk