Conference Talks

Black Hat

Breaking Parser Logic - Take Your Path Normalization Off and Pop 0days Out

Explore how inconsistent URL path normalization across frameworks and proxies exposes authorization bypasses and remote code execution.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

Stress and Hacking - Understanding Cognitive Stress in Tactical Cyber Ops

Examines how acute stress, fatigue, and frustration affect performance in tactical cyber operations, using workload and stress measures.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

How to Rob a Bank Over the Phone - Lessons Learned from an Actual Social Engineering Engagement

Explore real-world social engineering tactics and defense strategies through an actual bank heist phone call, offering valuable insights for both attackers and defenders in cybersecurity.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

New Adventures in Spying 3G and 4G Users - Locate, Track & Monitor

Researchers present attack vectors for tracking and monitoring users on 3G and 4G mobile networks, beyond established IMSI catcher techniques.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Breaking Electronic Door Locks Like You're on CSI - Cyber

A Black Hat talk explores breaking electronic door locks beyond the movie trope of a gadget cycling through combinations.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Black Hat

Exploiting USB-IP in Linux

A source-level walk-through of exploiting a buffer overflow in Linux’s USB/IP implementation, including the protocol, kernel allocator, and traffic protections.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

Backslash Powered Scanning - Hunting Unknown Vulnerability Classes

A scanner design that uses response analysis and tailored payloads to uncover known and previously unknown server-side injection vulnerabilities.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Black Hat

Invoke-DOSfuscation - Techniques for CMD Obfuscation

Explore in-memory cmd.exe obfuscation, from caret and quote tricks to string replacement, full encoding, and hiding binary names.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Black Hat

Go to Hunt, Then Sleep

A bedtime-story spoof turns threat hunting into a practical starting plan, guiding analysts through five hunts built around targets, tactics, techniques, and attack lifecycles.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Black Hat

Practical Tips for Defending Web Applications in the Age of DevOps

Practical lessons on adapting static analysis, dynamic scanning, and security visibility to fast-moving web development and deployment.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Black Hat

Insecurity in Building Automation - How to Create Dark Buildings with Light Speed

An examination of how weaknesses in building automation protocols and controllers can enable physical compromise and rapid disruption.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Black Hat

An ACE Up the Sleeve - Designing Active Directory DACL Backdoors

Explore how Active Directory DACL control relationships can conceal backdoors and create stealthy paths to domain compromise.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Black Hat

Breaking Kernel Address Space Layout Randomization - KASLR - With Intel TSX

Demonstrates how Intel TSX timing differences reveal kernel page properties, allowing the DrK attack to defeat KASLR across major operating systems.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Design Approaches for Security Automation

Learn how to choose and design security automation that scales, weighing tools and build-versus-buy decisions while avoiding false positives that burden teams.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Black Hat

Xenpwn - Breaking Paravirtualized Devices

Xenpwn’s hypervisor memory tracing exposed critical vulnerabilities in Xen’s paravirtualized drivers.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk