Systems Core Courses

Black Hat

Industrial Control Systems - Pentesting PLCs 101

Hands-on workshop exploring penetration testing techniques for industrial control systems, focusing on PLCs. Learn to identify vulnerabilities and attack Siemens and Schneider devices.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Black Hat

Network Attached Shell - N.A.S.ty Systems that Store Network Accessible Shells

Explore critical vulnerabilities in network storage devices, their impact on data security, and potential for network exploitation. Learn about attack techniques and implications for IT professionals and consumers.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Black Hat

Disasters in the Making - How I Torture Open Government Data Systems for Fun, Profit, and Time Travel

Explore techniques for exploiting vulnerabilities in open government data systems, uncovering potential risks and implications for security, privacy, and data integrity.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Black Hat

Let's Get Physical - Breaking Home Security Systems and Bypassing Controls

Explore covert methods to bypass home and office security systems, including intercepting signals and manipulating keypads, with live demonstrations of vulnerabilities in digital physical security.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Black Hat

Honey, I'm Home! - Hacking Z-Wave Home Automation Systems

Explore vulnerabilities in Z-Wave home automation systems, including protocol analysis, key extraction, and potential attack vectors. Learn about security implications for smart home devices and networks.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

TEDx

From Hacking Systems to Hacking the World - How to Redefine Potential

Inspiring journey of a young hacker turned entrepreneur, showcasing the power of challenging oneself, embracing potential, and using technology to make a positive impact on society.

• YouTube
• 16 minutes
• On-Demand
• Conference Talk

Black Hat

Drill Apple Core - Up and Down - Fuzz Apple Core Component in Kernel and User Mode for Fun and Profit

Explore kernel sanitizers, XNU syscall API patterns, and code coverage techniques for Apple systems. Live demo of macOS root access using 0-day vulnerabilities discovered through fuzzing.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Black Hat

For the Love of Money - Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems

Explore security vulnerabilities in mobile payment systems, focusing on economic implications, fraud risks, and outdated card standards. Learn about testing methods and potential attack vectors.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Black Hat

Debug for Bug - Crack and Hack Apple Core by Itself

Explore Apple kernel vulnerabilities through fuzzing, including double free and out-of-bounds issues. Learn about debugging and fuzzing techniques for uncovering security flaws in Apple's core systems.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Black Hat

Sensor and Process Fingerprinting in Industrial Control Systems

Explore innovative defense strategies using sensor noise and process fingerprinting to detect cyber and physical attacks on industrial control systems, with real-world demonstrations.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Black Hat

Arm IDA and Cross Check - Reversing the Boeing 787's Core Network

Uncover vulnerabilities in Boeing 787's Core Network through reverse engineering, revealing security flaws and their implications for aircraft systems and passenger safety.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Black Hat

Why so Spurious? Achieving Local Privilege Escalation on Operating Systems

Explore a critical x86 architecture vulnerability exploitable for local privilege escalation across Windows, macOS, and Linux. Learn about this widespread security issue and its implications.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Black Hat

Good Motive but Bad Design - Pitfalls in MPU Usage in Embedded Systems in the Wild

Explore pitfalls in Memory Protection Unit usage for IoT security. Analyze top microcontroller operating systems, uncovering potential vulnerabilities in embedded device defenses.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Black Hat

Non-Intrusive Vulnerability Localization and Hotpatching for Industrial Control Systems

Explore non-intrusive techniques for identifying and patching vulnerabilities in Industrial Control Systems, focusing on specialized requirements of devices like PLCs.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

Black Hat

UWB Real Time Locating Systems - How Secure Radio Communications May Fail in Practice

Explore vulnerabilities in UWB Real Time Locating Systems, potential exploits, and mitigation strategies to secure these systems against cyber attacks.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk