Black Hat Courses

The Pivotal Role of Large Language Models in Extracting Actionable TTP Attack Chains

Discover how LLMs revolutionize threat intelligence by automatically extracting TTP attack chains from unstructured reports, combining prompt engineering with knowledge graphs for enhanced accuracy.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Determining Exploitability of Vulnerabilities with SBOM and VEX

Discover how to leverage SBOM and VEX documents to determine vulnerability exploitability, reduce false positives, and achieve compliance while enhancing supply chain security posture.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Double Tap at the Blackbox - Hacking a Car Remotely Twice with MiTM

Discover how to exploit automotive security vulnerabilities through blackbox testing and Man-in-the-Middle attacks, enabling remote vehicle control without expensive hardware access.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

The Illusion of Isolation - How Isolation Failures in CI/CD Servers Lead to RCE and Privacy Risks

Uncover critical isolation vulnerabilities in CI/CD platforms that lead to RCE and privacy breaches, with real-world examples from Atlassian Bamboo and GoCD.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

KernJC - Automated Vulnerable Environment Generation for Linux Kernel Vulnerabilities

Discover KernJC, a tool that automates vulnerable environment generation for Linux kernel vulnerabilities using patch-based version identification and graph-based configuration detection.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Foreign Information Manipulation and Interference - Disinformation 2.0

Uncover how foreign actors use hybrid warfare tactics, AI-generated content, and social media manipulation to undermine democratic institutions and organizational security through disinformation campaigns.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

A Closer Look at the Gaps in the Grid - New Vulnerabilities and Exploits Affecting Solar Power

Uncover critical cybersecurity vulnerabilities in solar power systems that could enable coordinated attacks on power grids, affecting millions of households worldwide.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Standing on the Shoulders of Giants - De-Obfuscating WebAssembly Using LLVM

Discover how to reverse engineer obfuscated WebAssembly code using LLVM compiler infrastructure, covering essential Wasm internals, obfuscation techniques, and practical de-obfuscation methods.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

(Mis)adventures with Copilot+ - Attacking and Exploiting Windows NPU Drivers

Explore NPU architecture vulnerabilities in Windows Copilot+ PCs and learn privilege escalation techniques through driver exploitation with concrete attack demonstrations.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Behind Closed Doors - Bypassing RFID Readers

Explore advanced techniques for bypassing RFID access control systems, including Wiegand protocol interception, OSDP security implications, and DoS attacks in Red Team scenarios.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

The Once and Future Rules of Cybersecurity

Explore how cybersecurity rules evolved from the 2000s, which principles still matter, which failed, and what new guidelines will shape our digital future.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Agentic AI and Identity - The Biggest Problem We're Not Solving

Explore the critical cybersecurity challenges of Agentic AI identity management, authentication frameworks, and emerging threats in corporate environments.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Mini-App But Great Impact - New Ways to Compromise Mobile Apps

Uncover novel attack vectors targeting mobile super-apps through mini-app exploitation, including sandbox escaping, privilege escalation, and JavaScript prototype pollution techniques.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Watch Your Phone - Novel USB-Based File Access Attacks Against Mobile Devices

Uncover novel USB-based attacks that bypass mobile security mechanisms, including live demos of exploiting iOS/Android confirmation prompts and accessing locked devices.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Invisible Ink - Privacy Risks of CSS in Browsers and Emails

Uncover how CSS can bypass privacy protections to enable cross-site tracking and email fingerprinting, revealing hidden risks in modern browsers and email clients.

• YouTube
• 39 minutes
• Self-Paced
• Free Video