Black Hat Courses

Decompiling Deep Neural Network Compiled Binary

DnD reconstructs high-level neural network representations from compiled DNN binaries across instruction sets and compilers.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Scammers Who Scam Scammers, Hackers Who Hack Hackers - Exploring a Sub-economy on Cybercrime Forums

An investigation of the hidden marketplace economy in which cybercriminals scam, hack, and police one another.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Real-World Detection Evasion Techniques in the Cloud

Examines cloud-focused malware campaigns and how adversaries exploit cloud security mechanisms, including in serverless and container environments.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Aikido - Turning EDRs to Malicious Wipers Using 0-day Exploits

A demonstration of building a wiper that uses zero-day exploits to let an unprivileged user delete any file and make Windows unbootable.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Good Motive but Bad Design - Pitfalls in MPU Usage in Embedded Systems in the Wild

An analysis of how microcontroller operating systems use MPUs—and where their security guarantees fail to match their claims.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

How We Organize Large-Scale DDoS Exercises in the Netherlands

How Dutch organizations built a national coalition to coordinate large-scale DDoS mitigation after a wave of attacks.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Fuzzing and Breaking Security Functions of SIMATIC PLCs

A rogue engineer station exploits TLS and S7CommPlus weaknesses to control Siemens S7-1200/1500 PLCs, while fuzzing exposes crash vulnerabilities.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Knockout Win Against TCC - New Ways to Bypass Your MacOS Privacy Mechanisms

An examination of how TCC’s consent model and framework can be bypassed through newly identified macOS vulnerabilities and abuse techniques.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Grand Theft Drone - Reaching Breaking Point in Drone Proprietary RF Link Security

Examines how proprietary drone-control radio links rely on obscurity and what that means for their security.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

LCDPwn - Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities Again

A reexamination of CDPwn asks whether Layer 2 discovery protocol vulnerabilities were fixed and whether similar flaws affect other vendors’ enterprise devices.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Exploring a New Class of Kernel Exploit Primitive

A restricted kernel pointer read that reveals no memory contents is examined as a possible route to code execution or privilege escalation.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Design Flaws and Deployment Chaos in Cloud-Based IoT Access Control Policies

Examines flawed IoT access policies and deployment practices found at real manufacturers, and the security loopholes they can create.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Writing Your Own Ticket to the Cloud Like APT - A Deep Dive to AD FS Attacks, Detections, and Mitigations

A deep dive into AD FS attacks traces how federation weaknesses can open a path to cloud access, with attention to detection and mitigation.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

JS-ON - Security-OFF - Abusing JSON-Based SQL Queries

Examines how native JSON features in SQL databases can introduce vulnerabilities that developers and researchers may overlook.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Microsoft Defender for Office 365 Evasion - The Story of Confirmed Vulnerability

A security researcher's examination of vulnerabilities that enabled evasion of Microsoft Defender for Office 365's Safe Attachments and Safe Links protections.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk