Black Hat Courses

Stagefright - Scary Code in the Heart of Android

Exploring Android's Stagefright framework vulnerabilities, focusing on discovery techniques, OS internals, and security implications. Demonstrates proof-of-concept code and discusses mitigation strategies.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

The Lifecycle of a Revolution

Exploring the evolution of the internet, from idealistic beginnings to current challenges, and examining future trends in digital security, privacy, and freedom.

• YouTube
• 1 hour 11 minutes
• Self-Paced
• Conference Talk

Bringing a Machete to the Amazon

Explore AWS security challenges, vulnerabilities, and solutions. Learn assessment techniques and tools to protect your cloud infrastructure and applications.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Lights Off - The Darkness of the Smart Meters

Explore security vulnerabilities in smart power meters, including remote control capabilities and potential risks. Learn about device reverse engineering and its implications for connected home technology.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Exploring Yosemite - Abusing Mac OS X 10.10

Comprehensive analysis of Mac OS X 10.10 Yosemite's security features, demonstrating vulnerabilities, offensive techniques, and introducing a new security tool for detecting rootkits and abnormalities.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

C++11 Metaprogramming Applied to Software Obfuscation

Explore advanced C++11 metaprogramming techniques for software obfuscation, including compile-time code generation, polymorphism, and practical applications like string encryption and call obfuscation.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Two Factor Failure

Explore vulnerabilities in Two-Factor Authentication systems, including a new attack on mobile TOTP. Learn best practices for secure 2FA deployment in enterprise and web applications.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

PDF Attack - A Journey from the Exploit Kit to the Shellcode

Explore advanced PDF exploitation techniques, from obfuscated JavaScript analysis to shellcode extraction. Learn to modify and obfuscate malicious PDFs for pentesting and understand cybercriminals' latest tricks.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Conference Talk

Evasion of High-End IDPS Devices at the IPv6 Era

Explore IPv6 security vulnerabilities and evasion techniques against high-end IDPS devices, with demonstrations and proposed mitigation strategies for network protection.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Scala Security - Examining the Play and LiftWeb Frameworks

Explore security aspects of Scala's Play and LiftWeb frameworks, including OWASP Top 10 vulnerabilities, exploitation mitigations, and a new Scala library for SSRF prevention.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Attacking the Linux PRNG on Android

Explore vulnerabilities in Android's Linux PRNG, focusing on early boot attacks and real-world exploitation vectors. Learn about potential security risks and mitigations for embedded platforms.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Reflected File Download - A New Web Attack Vector

Explore a new web attack vector that allows attackers to download malicious files from trusted domains without uploading them, potentially bypassing security measures and spreading across social networks.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Ret2dir - Deconstructing Kernel Isolation

Explore kernel exploitation technique ret2dir, bypassing isolation protections by leveraging direct-mapped memory. Learn about vulnerabilities, attack models, and mitigation strategies for Linux kernels.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Gyrophone - Eavesdropping Using a Gyroscope

Explore how smartphone gyroscopes can be exploited to eavesdrop on nearby speech, bypassing microphone permissions and posing privacy risks. Learn about potential attacks and defenses.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Next Level Cheating and Leveling Up Mitigations

Explore sophisticated attacks on anti-cheat systems in multiplayer gaming, including practical demonstrations and implications for game security and the future of cheat prevention.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk