Black Hat Courses

HTTP Request Smuggling in 2020 - New Variants, New Defenses and New Challenges

Explore new variants, defenses, and challenges of HTTP Request Smuggling, an attack technique exploiting interpretations of non-standard HTTP requests between client and server.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Engineering Empathy - Adapting Software Engineering Principles and Process to Security

Explore how software engineering principles can enhance security practices, featuring insights from a role-reversal experiment between security and runtime teams.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Hacking the Supply Chain - The Ripple20 Vulnerabilities Haunt Tens of Millions of Critical Devices

Exposición sobre vulnerabilidades críticas Ripple20 que afectan a millones de dispositivos IoT en diversos sectores, detallando su descubrimiento, impacto y explotación técnica.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Stealthily Access Your Android Phones - Bypass the Bluetooth Authentication

Explore Android Bluetooth vulnerabilities, including BlueRepli, and learn stealthy access techniques. Discover security risks in AOSP and mobile manufacturers' oversights.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Web Cache Entanglement - Novel Pathways to Poisoning

Explore novel web cache poisoning techniques, probing cache inconsistencies to build sophisticated exploit chains. Learn to uncover vulnerabilities in caching systems across the internet.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

My Cloud is APT's Cloud - Investigating and Defending Office 365

Investigate and defend Office 365 against sophisticated attacks. Learn authentication types, attack lifecycle, and effective countermeasures for cloud-based enterprise security.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

IMP4GT - IMPersonation Attacks in 4G Networks

Explore IMP4GT attacks in 4G networks, revealing vulnerabilities in LTE security. Learn about impersonation techniques, their impact, and consequences for users and law enforcement.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

A Framework for Evaluating and Patching the Human Factor in Cybersecurity

Explore a framework for assessing and improving human-related cybersecurity vulnerabilities, focusing on evaluating and enhancing the human factor in security systems.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Demystifying Modern Windows Rootkits

Explore Windows rootkit development, from basic drivers to advanced hooking techniques. Learn about kernel-mode malware, network stack manipulation, and innovative methods to evade detection.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Office Drama on macOS

Explore macOS-specific Office macro attacks, their growing popularity, and unique exploit techniques. Learn about analysis, sandbox bypassing, and detection methods for these emerging threats.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Hiding Process Memory via Anti-Forensic Techniques

Explore novel anti-forensic techniques for hiding malicious process memory, evading detection by memory analysis tools while maintaining accessibility for malware functionality.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Security Research on Mercedes-Benz - From Hardware to Car Control

Explore Mercedes-Benz car security research, from hardware analysis to gaining control. Learn about attack surfaces, reverse engineering, and cloud control in modern connected vehicles.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Plundervolt - Flipping Bits from Software without Rowhammer

Discover Plundervolt: a software-based fault attack that threatens system security without physical access. Learn its mechanisms, potential impacts, and how it compares to Rowhammer.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep Learning

Explore deep-learning techniques to identify and reduce side-channel attack vulnerabilities, leveraging AI explainability for efficient implementation assessment and improved security.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Emulating Samsung's Baseband for Security Testing

Explore Samsung baseband security through emulation, enabling scalable vulnerability research and debugging for cellular network protocols.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk