Conference Talks

Black Hat

Horse Pill - A New Type of Linux Rootkit

A Linux rootkit repurposes container technology to persist despite UEFI Secure Boot and kernel module signing, hiding a remotely controlled backdoor.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Black Hat

When Governments Attack - State Sponsored Malware Attacks Against Activists, Lawyers, and Journalists

Examines government-backed malware campaigns against activists, lawyers, and journalists, including research on a threat actor targeting Europe and the post-Soviet states.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Black Hat

Breaking FIDO - Are Exploits in There?

An examination of security weaknesses in FIDO authentication, from protocol-level attacks to supporting architecture and physical-device compromises.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Black Hat

Using Undocumented CPU Behavior to See Into Kernel Mode and Break KASLR in the Process

A talk on using unprivileged prefetch behavior to map kernel memory, bypass KASLR, and expose virtual-to-physical mappings.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

MLD Considered Harmful - Breaking Another IPv6 Subprotocol

Examines how weaknesses in MLD and MLDv2 can disrupt IPv6 multicast, with a live attack demonstration and proposed mitigations.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Black Hat

Relaying EMV Contactless Transactions Using Off-The-Shelf Android Devices

Researchers demonstrate an EMV contactless relay attack using off-the-shelf Android devices that can complete some transactions faster than direct card use.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

Break Out of The Truman Show - Active Detection and Escape of Dynamic Binary Instrumentation

Shows how crafted code can expose dynamic binary instrumentation through translation blind spots, then escape the instrumenter's control.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Black Hat

Rapid Radio Reversing

A hybrid SDR and conventional-tool approach speeds wireless signal reverse engineering, demonstrated through a worked example involving signal analysis and replay.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Black Hat

Fuzzing Android - A Recipe for Uncovering Vulnerabilities Inside System Components in Android

A practical fuzzing approach for finding vulnerabilities in Android’s core system components, from seed generation and crash triage to disclosed CVEs.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Black Hat

Implementing Practical Electrical Glitching Attacks

A practical walkthrough of voltage and clock glitching that reproduces known exploits and develops affordable, reliable attacks against target devices.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

Lessons From Defending The Indefensible

A practical account of defending HTTP/S and DNS infrastructure against high-volume denial-of-service traffic, including packet filtering, BPF, kernel bypass, and tactics that failed.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Black Hat

Unboxing the White-Box - Practical Attacks Against Obfuscated Ciphers

Shows how hardware fault and side-channel attacks can expose keys from obfuscated white-box implementations of AES and TDES.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Black Hat

Cybersecurity for Oil and Gas Industries - How Hackers Can Manipulate Oil Stocks

Case studies trace how attacks on oil and gas business systems can affect operational data and connected industrial controls, with guidance on preventing them.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Black Hat

API Deobfuscator - Resolving Obfuscated API Functions in Modern Packers

Uses memory access analysis and iterative execution to recover API calls hidden by static and dynamic obfuscation in packed binaries.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Black Hat

Back Doors and Front Doors - Breaking the Unbreakable System

Examines how proposed government access mechanisms could bypass end-to-end encryption, focusing on implementation weaknesses and the debate over secure communications.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk