Black Hat Courses

IAM The One Who Knocks

Examines how inconsistent identity permissions across cloud providers can expose sensitive data and create paths to privilege escalation.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

I Am Whoever I Say I Am - Infiltrating Identity Providers Using a 0-Click Exploit

A vulnerability audit chains flaws in a popular identity provider into unauthenticated remote code execution as root.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Human or Not - Can You Really Detect the Fake Voices?

Examines whether AI-generated voice detection methods remain reliable outside laboratory settings.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Leveraging the Apple ESF for Behavioral Detections

Explains how Apple’s Endpoint Security Framework turns macOS event data into behavioral detections, including pivots for more advanced detection methods.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Let's Dance in the Cache - Destabilizing Hash Table on Microsoft IIS

Examines how Microsoft’s dynamic hashing design in IIS can be destabilized through hash table collision attacks.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Is WebAssembly Really Safe? - Wasm VM Escape and RCE Vulnerabilities Have Been Found in New Way

A standards-based fuzzing framework probes WebAssembly runtimes for VM escapes and remote code execution vulnerabilities.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Invisible Finger - Practical Electromagnetic Interference Attack on Touchscreen-based Devices

A practical demonstration of how intentional electromagnetic interference can exploit touchscreen devices and expose gaps in their resilience.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Kubernetes Privilege Escalation - Container Escape Equals Cluster Admin

Shows how powerful Kubernetes system pods can turn a container escape into cluster-wide privilege escalation, and how to identify and mitigate those paths.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Internal Server Error - Exploiting Inter-Process Communication in SAP's HTTP Server

A technical walkthrough of exploiting two SAP HTTP server memory corruption flaws through protocol techniques and the server’s inter-process communication mechanisms.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Industroyer2 - Sandworm's Cyberwarfare Targets Ukraine's Power Grid Again

A reverse-engineering look at how Industroyer2 uses IEC-104 to target Ukrainian power-grid equipment.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

In Need of 'Pair' Review - Vulnerable Code Contributions by GitHub Copilot

A security review of GitHub Copilot shows how its prompts can produce vulnerable code, from SQL injections to buffer overflows.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Harm Reduction - A Framework for Effective & Compassionate Security Guidance

A pragmatic, compassionate harm-reduction approach to cybersecurity addresses unavoidable risk where abstinence-based guidance may increase harm.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

AEPIC Leak - Architecturally Leaking Uninitialized Data from the Microarchitecture

A systematic analysis of CPU vulnerabilities reveals how transient-execution attacks and architectural flaws can arise from the same kinds of bugs.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Stalloris - RPKI Downgrade Attack

Shows how a malicious RPKI publication point can stall relying-party software, disable route-origin validation, and expose networks to prefix hijacks.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

No One Is Entitled to Their Own Facts, Except in Cybersecurity - Presenting an Investigation Handbook to Develop a Shared Narrative of Major Cyber Incidents

The playbook adapts lessons from aviation incident investigations to create a shared historical narrative of major cyber incidents through independent review.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk