Conference Talks

Black Hat

Pen Testing a City

A city-scale penetration testing method maps interdependent infrastructure and turns its attack surface into a plan for security exercises and mitigation.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

Commercial Mobile Spyware - Detecting The Undetectable

Researchers test commercial spyware vendors’ claims that their smartphone surveillance tools are undetectable.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Black Hat

Advanced IC Reverse Engineering Techniques - In Depth Analysis Of A Modern Smart Card

A smart-card case study shows how netlist extraction and chip imaging can turn hardware reverse engineering from a months-long effort into weeks.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

Remote Exploitation of an Unaltered Passenger Vehicle

A factory-fresh Jeep Cherokee is remotely compromised through a chain of network and vehicle-system exploits, ending in CAN messages that affect physical systems.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

Remote Physical Damage 101 - Bread and Butter Attacks

Explore generic process attacks that use valves, pumps, pressure transients, and other physical effects to damage equipment after cyber access.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Black Hat

Abusing XSLT for Practical Attacks

A demonstration of how crafted XSLT can expose system files, disrupt application logic, and bypass browser same-origin protections.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

When IoT Attacks - Hacking a Linux-Powered Rifle

A reverse-engineering walkthrough exposes how a networked precision rifle’s Linux scope, firmware, and companion apps create security and privacy risks.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Black Hat

Web Timing Attacks Made Practical

A practical method for remote timing attacks combines improved data collection with an adaptive Kalman filter to detect timing differences across congested networks.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

Breaking HTTPS With BGP Hijacking

A BGP route hijack can undermine HTTPS by exploiting the routing assumptions behind TLS certificate issuance.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Black Hat

Emanate Like A Boss - Generalized Covert Data Exfiltration With Funtenna

Funtenna turns ordinary hardware into software-only transmitters, covertly emanating arbitrary data across the electromagnetic spectrum—even from air-gapped systems.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Black Hat

Two Factor Failure

Examines vulnerabilities in two-factor systems, including an attack on mobile TOTP, and outlines safer deployment practices.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Black Hat

Next Level Cheating and Leveling Up Mitigations

A technical look at two practical attacks against a popular anti-cheat engine and what they reveal about protecting multiplayer games.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Black Hat

Industrial Control Systems - Pentesting PLCs 101

Get hands-on with industrial control system penetration testing by probing Siemens and Schneider PLCs and exploring common SCADA components and security flaws.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

Lessons Learned from Eight Years of Breaking Hypervisors

Real hypervisor breakouts show how feature creep and poor design expand attack surfaces, with lessons for building and hardening hypervisors.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Black Hat

Windows Kernel Graphics Driver Attack Surface

A security-focused look at Windows graphics drivers examines exposed interfaces such as IOCTLs through source review and reverse engineering.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk