Conference Talks

Black Hat

MoRE Shadow Walker - The Progression of TLB-Splitting on x86

Trace how changes to Intel x86 TLBs reshaped code hiding, from PaX and Shadow Walker to techniques for newer processors.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

Reverse Engineering Flash Memory for Fun and Benefit

A hands-on method for reverse engineering embedded devices by reading and reprogramming their flash memory when JTAG access is unavailable.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Black Hat

What Goes Around Comes Back Around - Exploiting Fundamental Weaknesses in Botnet C&C Panels

A reverse attack methodology exposes design and deployment weaknesses in botnet command-and-control panels, with case studies of detection and compromise.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

Full System Emulation - Achieving Successful Automated Dynamic Analysis of Evasive Malware

Explains how full-system emulation helps automated malware sandboxes observe behavior and overcome environment checks, stalling code, and other analysis evasion.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

The Devil Does Not Exist - The Role of Deception in Cyber

Explore how human deception shapes cyber operations, including ways attackers mislead defenders and defenders deceive attackers.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Black Hat

Racing Towards Practical Timing Attacks

A practical look at remote timing attacks, showing which response-time differences can be measured and exploited across common web application scenarios.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

SVG - Exploiting Browsers without Image Parsing Bugs

SVG can execute scripts in browsers, so treating it like a passive image creates security risks.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Black Hat

Beyond ‘Check The Box’ - Powering Intrusion Investigations

Move intrusion investigations beyond checkbox compliance by using DHCP, DNS, and authentication logs to investigate possible compromise.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Black Hat

Exploiting DNS Servers Changes

A Black Hat presentation on exploiting changes to DNS servers.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

Black Hat

USB Attacks Need Physical Access Right? Not Any More

A talk on USB attacks that challenge the assumption that an attacker needs physical access.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Black Hat

Disasters in the Making - How I Torture Open Government Data Systems for Fun, Profit, and Time Travel

A Black Hat talk on pushing open government data systems to their limits, framed around the speaker’s unconventional experiments with them.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Black Hat

Discovering Debug Interfaces with the JTAGulator Part 1

A look at the JTAGulator, a hardware tool for finding debug interfaces on circuit boards.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Black Hat

Tomorrow’s News is Today’s Intel - Journalists as Targets and Compromise Vectors

Explores how journalists can be targeted and used as vectors for compromise.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Black Hat

Dude, WTF in My CAN!

An investigation of unexpected behavior inside a CAN network.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Black Hat

I Know You Want Me - Unplugging PlugX

A technical talk on investigating and disrupting PlugX.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk