Black Hat Courses

Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet

Explore remote code execution vulnerabilities in physical security systems, learning to exploit and disarm alarms through reverse engineering and network protocol analysis.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

New Attack Surface in Safari - Using Just One Web Audio Vulnerability to Rule Safari

Explores a novel attack surface in Safari, focusing on vulnerabilities in system libraries like audio. Demonstrates how a single Web Audio vulnerability can be exploited to compromise Safari's security.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

The Tangled Webview - Javascriptinterface Once More

Unveils new Android WebView vulnerabilities related to JavascriptInterface, bypassing all verifications. Presents a novel attack model and discusses security implications for mobile app developers.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

A Walk Through Historical Correlations Between Vulnerabilities and Stock Prices

Explore the impact of security vulnerabilities and data breaches on stock prices across industries, analyzing recovery patterns and sector-specific effects through historical data analysis.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Analyzing and Fuzzing for Qualcomm Hexagon Processor

Explore techniques for analyzing and fuzzing Qualcomm Hexagon processors, overcoming challenges in firmware analysis, emulation, and hardware-dependent targets for enhanced security research.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

In-Field Emulation and Fuzzing of PLCs to Uncover the Next Zero-Day Threat in Industrial Control Systems

Explore innovative techniques for uncovering vulnerabilities in Industrial Control Systems through in-field emulation and fuzzing of PLCs, focusing on proactive security measures beyond network-level exploits.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Manufacturing Hardware Implants from Idea to Mass Production - A Hacker's Journey

Explore the journey of creating and mass-producing hacking devices, from initial concept to final product. Learn about R&D, quality assurance, and manufacturing challenges in hardware development.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

BinTyper - Type Confusion Detection for C++ Binaries

Explore a novel approach to detect type confusion vulnerabilities in C++ binaries, enhancing software security against malicious code execution attacks.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Jack-in-the-Cache - A New Code Injection Technique through Modifying X86-to-ARM Translation Cache

Explores a novel code injection technique for Windows 10 on ARM, exploiting vulnerabilities in x86-to-ARM translation cache to compromise system security on ARM-based laptops.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

FPs Are Cheap - Show Me the CVEs

Evaluating SAST tools: Learn how to assess their effectiveness in finding real vulnerabilities using synthetic test suites and practical examples of CVEs.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Shield with Hole - New Security Mitigation Helps Us Escape Chrome Sandbox to Exfiltrate User Privacy

Explore how new security measures in Chrome can be exploited to bypass the sandbox and compromise user privacy, revealing potential vulnerabilities in browser protection mechanisms.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Graph Convolutional Network-Based Suspicious Communication Pair Estimation for Industrial Control Systems

Explore graph convolutional networks for detecting suspicious communication pairs in industrial control systems, enhancing security monitoring beyond traditional whitelisting methods.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

The Subtle Art of Chaining Headers - IKEv2 Attack Surface Case Study

Explore IKEv2 attack surface through header chaining, uncovering vulnerabilities in IPsec VPNs. Learn techniques for identifying and exploiting weaknesses in Internet Key Exchange implementations.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Fingerprint-Jacking - Practical Fingerprint Authorization Hijacking in Android Apps

Practical exploration of fingerprint authorization vulnerabilities in Android apps, demonstrating attack techniques and suggesting mitigation strategies for developers.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk