Black Hat Courses

No Mr. Cyber Threat! - A Psychological Approach to Managing the Fail-to-Challenge Vulnerability

Explore psychological tactics to address workplace security vulnerabilities, focusing on staff's reluctance to challenge suspicious individuals and behaviors despite obvious red flags.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

All Your GNN Models and Data Belong to Me

Explore vulnerabilities in Graph Neural Networks, including data extraction and model inversion attacks, with insights on protecting proprietary data and models in real-world applications.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

The COW - Container On Windows Who Escaped the Silo

Explore Windows container isolation, its implementation, and potential vulnerabilities. Learn about server silos, job objects, and the security implications of container breakouts.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Oops! I Glitched It Again - How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M

Explore advanced fault injection techniques to bypass glitching protections on ARM TrustZone-M, revealing vulnerabilities in real-world computing devices and discussing potential countermeasures.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

CastGuard - Mitigating Type Confusion in C++

Explore CastGuard, a novel mitigation technique for preventing illegal static down-casts in C++ code, enhancing security in Windows components through efficient virtual function table pointer utilization.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Trust Dies in Darkness - Shedding Light on Samsung's TrustZone Keymaster Design

Exposing critical security flaws in Samsung Galaxy devices' hardware-backed keystore through reverse engineering, revealing vulnerabilities in cryptographic design and implementation.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

XMPP Stanza Smuggling or How I Hacked Zoom

Discover how XML parsing quirks in XMPP can be exploited for attacks, including a demonstration of remote code execution in Zoom, presented by security researcher Ivan Fratric.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Browser-Powered Desync Attacks - A New Frontier in HTTP Request Smuggling

Explore advanced HTTP request smuggling techniques using browsers as attack platforms. Learn to exploit server vulnerabilities, poison connection pools, and launch sophisticated web attacks.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

To Flexibly Tame Kernel Execution With Onsite Analysis

Explore OASIS, a framework for dynamic kernel analysis, enabling flexible control and data collection from kernel threads for various applications like memory introspection and malware testing.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

RCE-as-a-Service - Lessons Learned from 5 Years of Real-World CI-CD Pipeline Compromise

Explore CI/CD pipeline vulnerabilities, their critical role in infrastructure, and novel exploitation techniques. Learn about real-world examples and demos of turning build pipelines into remote code execution vectors.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

The Open Threat Hunting Framework - Enabling Organizations to Build, Operationalize, and Scale Threat

Explore the Open Threat Hunting Framework to build, operationalize, and scale threat hunting in organizations. Learn from industry experts about effective strategies and best practices.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

UWB Real Time Locating Systems - How Secure Radio Communications May Fail in Practice

Explore vulnerabilities in UWB Real Time Locating Systems, potential exploits, and mitigation strategies to secure these systems against cyber attacks.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Living Off the Walled Garden - Abusing the Features of the Early Launch Antimalware Ecosystem

Explore methodology for assessing ELAM drivers, demonstrating how overly-permissive rules enable adversary tradecraft opportunities through abuse of intended functionality, with practical demonstrations and insights.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Breaking Firmware Trust From Pre-EFI - Exploiting Early Boot Phases

Explore recent UEFI firmware security changes, focusing on Intel CPUs. Covers firmware mitigations in SMM/DXE and new attacks on Intel PPAM, offering unique insights from an offensive security perspective.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Malware Classification With Machine Learning Enhanced by Windows Kernel Emulation

Explore hybrid machine learning for malware classification using static and dynamic analysis, Windows kernel emulation, and neural networks. Learn about adversarial ML and future developments.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk