Conference Talks

Black Hat

Precursor - Towards Evidence-Based Trust in Hardware

Explores how the Precursor platform could make trust in hardware evidence-based rather than a matter of faith.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

The Evil of Spy Camera

Explains how spy cameras work and presents effective methods for detecting hidden cameras.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Black Hat

Walking Your Dog in Multiple Forests - Breaking AD Trust Boundaries through Kerberos Vulnerabilities

A security research presentation on breaking trust boundaries between multiple Active Directory forests through Kerberos vulnerabilities.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Black Hat

The Evil Alt-Ego - Abusing HTTP Alternative Services

Explores how HTTP Alternative Services can be abused to undermine protocol optimization, load balancing, and client segmentation.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Black Hat

First Contact - Vulnerabilities in Contactless Payments

A presentation examining vulnerabilities in NFC contactless payments and the older protocols underpinning them.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Black Hat

Faking a Factory - Creating and Operating a Realistic Honeypot

Learn to create and operate realistic honeypots that simulate industrial control systems and factory processes.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Black Hat

Misuse of DNS - The Second Most Used Protocol

Explores how DNS, a foundational Internet protocol, has been misused and attacked over four decades, including its growing importance with IPv6 traffic.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Black Hat

Escaping Virtualized Containers

Examines how vulnerabilities in the shared kernel can let processes escape containers and compromise the host.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Black Hat

WIFI - Important Remote Attack Surface - Threat is Expanding

Examines vulnerabilities in Wi-Fi drivers before password authentication and the security risks they create at the Wi-Fi layer.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

BitLeaker - Subverting BitLocker with One Vulnerability

A security presentation examines how a single vulnerability can subvert BitLocker and compromise secrets protected by a tamper-resistant TPM.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Black Hat

Discovering Hidden Properties to Attack the Node.js Ecosystem

Explores hidden property abusing, a novel attack method that tampers with critical Node.js program states through JavaScript data exchange.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Black Hat

iOS Kernel PAC, One Year Later

A technical analysis of iOS kernel Pointer Authentication bypasses and five new methods for achieving arbitrary kernel code execution on iOS 13.3.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Black Hat

Detecting Fake 4G Base Stations in Real Time

Explore how 4G/LTE IMSI-catchers work—and how software and heuristics can detect fake base stations in real time.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

Demigod - The Art of Emulating Kernel Rootkits

Explores emulating kernel rootkits to enable dynamic analysis at the operating-system level.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

Black Hat

A Decade After Stuxnet's Printer Vulnerability - Printing is Still the Stairway to Heaven

Examines how Windows Print Spooler vulnerabilities kept printers an effective path to code execution a decade after Stuxnet.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk