Black Hat Courses

The Art of Exploiting UAF by Ret2bpf in Android Kernel

Explore Android kernel exploitation techniques, focusing on a Use-After-Free vulnerability in xt_qtaguid. Learn about KASLR bypass, rooting methods, and security measures against such attacks.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Achieving Linux Kernel Code Execution Through a Malicious USB Device

Explore Linux kernel exploitation via malicious USB devices, focusing on CVE-2016-2384 vulnerability. Learn about USB-based attacks, payload delivery, and mitigation strategies.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Owfuzz - WiFi Nightmare

Explore WiFi security vulnerabilities and attack surfaces using Owfuzz, a fuzzing tool for detecting protocol flaws in WiFi implementations, including WIFI6 and WPA3.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs

Explore cloud security threats, including crypto-mining worms and innovative techniques targeting AWS, Kubernetes, and other providers. Learn about hackers' methods, persistence strategies, and potential impacts on cloud environments.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

APTs Go Teleworking - The Rise of VPN Exploits

Explore the rise of VPN exploits amid increased remote work, focusing on Pulse Secure vulnerabilities, incident response challenges, and threat actor tactics in cyber espionage campaigns.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Practical HTTP Header Smuggling - Sneaking Past Reverse Proxies to Attack AWS and Beyond

Explore HTTP header smuggling techniques to bypass security measures, attack web applications, and exploit vulnerabilities in proxy servers and AWS services.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Certified Pre-Owned - Abusing Active Directory Certificate Services

Explore AD CS vulnerabilities for credential theft, persistence, and domain escalation. Learn offensive and defensive techniques to secure Active Directory PKI implementations.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Bypassing Windows Hello for Business and Pleasure

Explore vulnerabilities in Windows Hello's face recognition, demonstrating how attackers can bypass this passwordless authentication using a crafted USB device.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms

Explore novel DNS vulnerabilities affecting major cloud providers, their impact on corporate networks, and potential information leakage. Learn about root causes, exploitation methods, and mitigation strategies.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Bridging Security Infrastructure Between the Data Center and AWS Lambda

Explore secure integration of serverless technology with data center services, focusing on workload identity in AWS Lambda and bridging identity between on-premises and cloud environments.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Breaking Secure Bootloaders

Explore techniques to bypass secure bootloaders, including signature verification vulnerabilities, memory analysis, and firmware update exploits. Learn to identify and exploit weaknesses in modern device protection mechanisms.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

Cloudy with a Chance of APT - Novel Microsoft 365 Attacks in the Wild

Explore novel APT techniques targeting Microsoft 365, including persistent access methods and data extraction. Learn technical details, potential extensions, and prepare for emerging threats.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

A Broken Chain - Discovering OPC UA Attack Surface and Exploiting the Supply Chain

Explore OPC-UA protocol vulnerabilities and potential cyberattack vectors in industrial communication systems. Learn about attack surfaces, exploitation techniques, and security implications for Industry 4.0 environments.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Can You Roll Your Own SIEM

Explore building a custom cloud-native SIEM solution, discussing considerations, requirements, and benefits compared to vendor options. Learn about cost savings and improved capabilities.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

5G IMSI Catchers Mirage

Investigates 5G security mechanisms against IMSI catchers, exploring vulnerabilities and protection techniques through practical experiments with commercial devices.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk