Black Hat Courses

The COW - Container On Windows Who Escaped the Silo

Explore Windows container isolation, its implementation, and potential vulnerabilities. Learn about server silos, job objects, and the security implications of container breakouts.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Oops! I Glitched It Again - How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M

Explore advanced fault injection techniques to bypass glitching protections on ARM TrustZone-M, revealing vulnerabilities in real-world computing devices and discussing potential countermeasures.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

CastGuard - Mitigating Type Confusion in C++

Explore CastGuard, a novel mitigation technique for preventing illegal static down-casts in C++ code, enhancing security in Windows components through efficient virtual function table pointer utilization.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Trust Dies in Darkness - Shedding Light on Samsung's TrustZone Keymaster Design

Exposing critical security flaws in Samsung Galaxy devices' hardware-backed keystore through reverse engineering, revealing vulnerabilities in cryptographic design and implementation.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

XMPP Stanza Smuggling or How I Hacked Zoom

Discover how XML parsing quirks in XMPP can be exploited for attacks, including a demonstration of remote code execution in Zoom, presented by security researcher Ivan Fratric.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Browser-Powered Desync Attacks - A New Frontier in HTTP Request Smuggling

Explore advanced HTTP request smuggling techniques using browsers as attack platforms. Learn to exploit server vulnerabilities, poison connection pools, and launch sophisticated web attacks.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

To Flexibly Tame Kernel Execution With Onsite Analysis

Explore OASIS, a framework for dynamic kernel analysis, enabling flexible control and data collection from kernel threads for various applications like memory introspection and malware testing.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

RCE-as-a-Service - Lessons Learned from 5 Years of Real-World CI-CD Pipeline Compromise

Explore CI/CD pipeline vulnerabilities, their critical role in infrastructure, and novel exploitation techniques. Learn about real-world examples and demos of turning build pipelines into remote code execution vectors.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

The Open Threat Hunting Framework - Enabling Organizations to Build, Operationalize, and Scale Threat

Explore the Open Threat Hunting Framework to build, operationalize, and scale threat hunting in organizations. Learn from industry experts about effective strategies and best practices.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

UWB Real Time Locating Systems - How Secure Radio Communications May Fail in Practice

Explore vulnerabilities in UWB Real Time Locating Systems, potential exploits, and mitigation strategies to secure these systems against cyber attacks.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Living Off the Walled Garden - Abusing the Features of the Early Launch Antimalware Ecosystem

Explore methodology for assessing ELAM drivers, demonstrating how overly-permissive rules enable adversary tradecraft opportunities through abuse of intended functionality, with practical demonstrations and insights.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Breaking Firmware Trust From Pre-EFI - Exploiting Early Boot Phases

Explore recent UEFI firmware security changes, focusing on Intel CPUs. Covers firmware mitigations in SMM/DXE and new attacks on Intel PPAM, offering unique insights from an offensive security perspective.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Malware Classification With Machine Learning Enhanced by Windows Kernel Emulation

Explore hybrid machine learning for malware classification using static and dynamic analysis, Windows kernel emulation, and neural networks. Learn about adversarial ML and future developments.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Bug Hunters Dump User Data - Can They Keep It? Well They're Keeping It Anyway

Explores legal and ethical implications of security researchers handling sensitive user data during bug bounty disclosures, examining responsibilities and potential consequences for all parties involved.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

The Growth of Global Election Disinformation - The Role and Methodology of Government-Linked Cyber Actors

Explore how government-linked cyber actors influence elections through disinformation campaigns, focusing on a case study from Colombia's 2022 elections and strategies for detecting such operations.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk