IT Compliance Courses and Certifications

Black Hat

An Attacker Looks at Docker - Approaching Multi-Container Applications

Explore containerization's impact on offensive security operations, focusing on Docker's implications for penetration testing and application security in multi-container environments.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Black Hat

BlueBorne - A New Class of Airborne Attacks that can Remotely Compromise Any Linux - IoT Device

Discover the dangers of BlueBorne, a new airborne attack method that can remotely compromise Linux and IoT devices. Learn about zero-day exploits, their impact, and how to protect against these threats.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Black Hat

Zero Days, Thousands of Nights - The Life & Times of Zero-Day Vulnerabilities and Their Exploits

Explore zero-day vulnerabilities and exploits through rare data analysis, revealing insights on their lifecycle, development, and implications for cybersecurity and policy.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Black Hat

Why Most Cyber Security Training Fails and What We Can Do About It

Explores limitations of current cybersecurity awareness training and proposes innovative solutions to enhance effectiveness against spear phishing and other cyber threats.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

How We Created the First SHA-1 Collision and What it Means for Hash Security

Explore the creation of the first SHA-1 collision, its implications for hash security, and the challenges faced in developing a meaningful payload and scaling computation.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

Cracking the Lens - Targeting HTTP's Hidden Attack-Surface

Explore hidden attack surfaces in modern web infrastructure, focusing on transparent systems for performance and analytics. Learn to identify and exploit overlooked vulnerabilities.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

Exploiting Curiosity and Context - How to Make People Click on a Dangerous Link

Explores how curiosity and context influence clicking on dangerous links, analyzing user behavior and reasoning to improve cybersecurity strategies and protection mechanisms.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Black Hat

I'm Not a Human - Breaking the Google reCAPTCHA

Explore techniques to bypass Google's reCAPTCHA using risk analysis manipulation, deep learning for image recognition, and automated solving methods. Discusses implications for CAPTCHA security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

Black Hat

Bypassing Browser Security Policies for Fun and Profit

Explore mobile browser vulnerabilities and security policy bypasses, including Same Origin Policy and Content Security Policy. Learn testing methodologies and see real-world examples of Android browser exploits.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Black Hat

Commix - Detecting and Exploiting Command Injection Flaws

Automated tool for detecting and exploiting command injection vulnerabilities in web applications. Covers various exploitation scenarios and reveals 0-day vulnerabilities across different platforms.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Black Hat

Even The LastPass Will Be Stolen, Deal With It!

Uncover vulnerabilities in LastPass password manager, including methods to steal master passwords, bypass 2FA, and access encrypted vaults, highlighting the importance of robust security measures.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Black Hat

ZigBee Exploited - The Good, The Bad, And The Ugly

Explore ZigBee's security vulnerabilities in IoT devices, focusing on smart home applications. Learn about weaknesses, practical exploits, and a new security-testing framework for this widespread communication standard.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Black Hat

Stagefright - Scary Code in the Heart of Android

Exploring Android's Stagefright framework vulnerabilities, focusing on discovery techniques, OS internals, and security implications. Demonstrates proof-of-concept code and discusses mitigation strategies.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Black Hat

Industrial Control Systems - Pentesting PLCs 101

Hands-on workshop exploring ICS security, focusing on PLC vulnerabilities. Learn to assess and exploit industrial control systems using real-world examples and practical techniques.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Black Hat

Hack Your ATM with Friend's Raspberry Pi

Explore ATM vulnerabilities and hacking techniques using Raspberry Pi, focusing on device interfaces and communication protocols. Learn about potential security risks and countermeasures in ATM systems.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk