Black Hat Courses

Needing the DoH - The Ongoing Encryption and Centralization of DNS

Explore DNS encryption's impact on internet privacy, security, and network operations. Delve into DoT and DoH standards, their implications for users and providers, and the shift towards centralized DNS.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

TiYunZong Exploit Chain to Remotely Root Modern Android Devices - Pwn Android Phones from 2015-2020

Comprehensive exploit chain analysis for remotely rooting modern Android devices, focusing on Pixel phones. Explores attack surfaces, introduces new vulnerabilities, and demonstrates practical exploitation techniques.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Reverse Engineering the Tesla Battery Management System to Increase Power Available

Explore Tesla's Battery Management System reverse engineering, focusing on power upgrades in performance models. Learn about architecture, data structures, and hardware modifications for enhanced vehicle performance.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Ruling StarCraft Game Spitefully - Exploiting the Blind Spot of AI-Powered Game Bots

Explore techniques to exploit vulnerabilities in AI-powered game bots, focusing on StarCraft. Learn about deep reinforcement learning, adversarial attacks, and potential defenses in gaming AI.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Breaking VSM by Attacking SecureKernel

Explore vulnerabilities in Windows 10's SecureKernel, potentially compromising Virtualization-Based Security. Learn exploitation techniques and the process of finding and fixing critical security flaws.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Practical Defenses Against Adversarial Machine Learning

Explore real-world attacks on ML systems, from recommendation engines to email filters, and learn practical defense strategies against adversarial machine learning threats.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Detecting Access Token Manipulation

Demystifying Windows access token manipulation attacks and providing effective detection strategies for defensive practitioners in enterprise environments.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Mind Games - Using Data to Solve for the Human Element

Discover data-driven techniques to effectively reduce human risk in cybersecurity, challenging traditional training approaches and focusing on behavioral change strategies.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Finding New Bluetooth Low Energy Exploits via Reverse Engineering Multiple Vendors' Firmwares

Explore Bluetooth Low Energy vulnerabilities through firmware reverse engineering, uncovering remote code execution exploits at the protocol's lowest levels without authentication or pairing.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Election Security - Securing America's Future

Explore the US government's efforts to secure elections, including intelligence sharing, cybersecurity services, and collaboration with state and local officials to protect against malicious activities.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

EdTech - The Ultimate APT

Explore the privacy and security risks of educational technology implementation in schools, highlighting concerns and potential actions for improvement.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

The Devils in the Dependency - Data Driven Software Composition Analysis

Análisis de datos sobre el uso de bibliotecas de código abierto en aplicaciones, examinando vulnerabilidades, dependencias y patrones de actualización para mejorar la seguridad del software.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Decisions and Revisions - The Ever Evolving Face of the Black Hat NOC

Explore the evolution of Black Hat's network operations, including equipment choices, regional adaptations, and cybersecurity insights from global events. Gain insider knowledge on network deployment and attendee behavior trends.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Thinking Outside the JIT Compiler - Understanding and Bypassing StructureID Randomization with Generic and Old-School Methods

Explore generic methods to bypass StructureID Randomization, gaining arbitrary Read/Write ability without relying on JIT compiler-related techniques. Learn innovative approaches to inspire better security mitigations.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Bypassing KPTI Using the Speculative Behavior of the SWAPGS Instruction

Unveiling a new speculative execution attack exploiting SWAPGS instruction, bypassing existing CPU and kernel protections. Explores side-channel vulnerabilities and their implications for system security.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk