Conference Talks

Black Hat

A Journey From JNDI-LDAP Manipulation to Remote Code Execution Dream Land

See how attacker-controlled JNDI lookups can turn naming and directory services into paths to arbitrary code execution in Java applications.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

Does Dropping USB Drives in Parking Lots and Other Places Really Work?

An experiment with nearly 300 dropped USB drives measures how often people plug them in and open files, and examines what influences their choices.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Black Hat

Side-Channel Attacks on Everyday Applications

A FLUSH+RELOAD cache attack can reveal which Wikipedia pages another user visits, extending side-channel techniques beyond cryptography.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Black Hat

Demystifying the Secure Enclave Processor

A technical look inside Apple’s Secure Enclave, tracing its hardware, SEPOS, iOS communication path, and potential attack vectors.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

Hacking the Wireless World with Software Defined Radio 2.0

A tour of reverse-engineering radio signals, with demonstrations spanning satellite links, aircraft data, RFID, radar, and radio encryption.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

Black Hat

Next Level Cheating and Leveling Up Mitigations

Two practical attacks show how attackers can bypass popular anti-cheat software used in multiplayer games.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

Understanding SCADA's Modbus Protocol

A hands-on workshop explores Modbus through network capture analysis, endpoint simulators, and generating traffic to query and fuzz devices.

• YouTube
• 1 hour 52 minutes
• Self-Paced
• Conference Talk

Black Hat

Bypassing Self-Encrypting Drives in Enterprise Environments

Examines how vulnerabilities in self-encrypting drives can let attackers bypass full-disk encryption and how organizations can protect against the threat.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Black Hat

Exploiting XXE Vulnerabilities in File Parsing Functionality

A technical walkthrough of exploiting XXE vulnerabilities in office-document file uploads, with real-world examples and a tool for preparing malicious files.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Black Hat

Cloning 3G - 4G SIM Cards With A PC And An Oscilloscope - Lessons Learned In Physical Security

Differential power analysis recovers MILENAGE secrets from 3G/4G SIM cards, enabling cloning and revealing what happens when duplicate cards receive calls or texts.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Black Hat

Abusing Windows Management Instrumentation - WMI

Explore how WMI enables fileless, event-triggered persistence, including attacker techniques, backdoor construction, and ways to detect and prevent these attacks.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Server-Side Template Injection - RCE for the Modern Web App

Trace server-side template injection from seemingly simple inputs through template-engine exploits to remote code execution.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Black Hat

Exploiting the DRAM Rowhammer Bug to Gain Kernel Privileges

A practical demonstration of turning probabilistic DRAM bit flips into browser sandbox escapes and kernel privilege escalation, with Rowhammer exploitation and mitigation techniques.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Black Hat

Reflected File Download - A New Web Attack Vector

RFD turns reflected input into trusted-looking executable downloads, enabling attacks that cross browser boundaries and can trigger shell commands.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Industrial Control Systems - Pentesting PLCs 101

Hands-on penetration testing of two real PLCs shows how industrial control systems communicate and where their security flaws can be exploited.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk