Black Hat Courses

Black Hat

Building Cyber Security Strategies for Emerging Industries in Sub Saharan Africa

1 review

Syllabus: Introduction Why this talk Four Questions Common Threats Common Attacks Challenges Cyber Security Awareness Making Solutions Better Questions Concerns Final Question

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Attack on Titan M, Reloaded: Vulnerability Research on a Modern Security Chip

Syllabus: Introduction Fuzzing Vulnerability Vulnerability Impact What is StrongBox Demo Mitigation Conclusion

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Attacks From a New Front Door in 4G & 5G Mobile Networks

Syllabus: Intro General mobile network Exposure via a provider Drone control via network exposure Control and configure the SIMS How it works: Get device location Misc functions Attack model for network exposure Commercial loT service platform security c…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

AAD Joined Machines - The New Lateral Movement

Syllabus: Introduction Technical Background Cables PKU Networks Messages Authentication Verify NegoX Demo Preparation

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Better Privacy Through Offense: How To Build a Privacy Red Team

Syllabus: Intro The Case for Offensive Privacy Risk Differentiation Red Team Operations Blue Teams Privacy Red Team Team Composition Privacy Weaknesses Privacy Attack Framework Technical Assessments Operations Findings Final Thoughts Lessons Learned Conc…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Whip the Whisperer: Simulating Side Channel Leakage

Syllabus: Introduction The problem The ingredients The research Countermeasure testing SOC simulation Future work Conclusions

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Bug Bounty Evolution: Not Your Grandson's Bug Bounty

Syllabus: Intro The Parable of the Long Spoon History of Bug Bounty Vulnerability Coordination maturity model Organizational commitment Labor laws Big payouts Whats next Metrics Vulnerability Handling Cybersecurity Apprenticeships Conclusion

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Taking Kernel Hardening to the Next Level

Syllabus: Introduction Pointer Authentication Based CFI Context Based CFI New Context Complex Compiler Behavior Static Validator Use a Complete Difference Optimize Access Validation Approach

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Bypass CFG in Chrome

Syllabus: black hat ASIA 2022 What is CFG History of CFG How Dose CFG Work Previous CFG Bypass How about Chrome Bypass CFG in Chrome How to Improve Enhanced Security Mode of Edge Takeaways

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

ChaosDB: How We Hacked Databases of Thousands of Azure Customers (rev)

Syllabus: Intro Wiz Research Team Motivation Research Mindset Bug #1 - Jupyter Notebook LPE Bug #2 - Unrestricted Network Access Network Recon - IMDS Network Recon - WireServer WireServer 101 - Goal State WireServer 101 - Extension Configuration WireServ…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

TeamTNT: Explosive Cryptomining

Syllabus: Intro Winter 2020 Targeting of Redis Hiding Files Credential Stealing Exfil of Stolen Credentials Tsunami RatHole Oldest Artifact Historical Traces Targeting Exposed Docker Instances Attack Flow Connection to other scripts Continue Attacking Do…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

ReCertifying Active Directory Certificate Services

Syllabus: Introduction Agenda Background Request a Certificate Certificate Template Client Authentication Subject Alternative Name Authentication to Active Directory malicious certificate enrollments Certify Defenses Escalation scenarios Certificate temp…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Zen and the Art of Adversarial Machine Learning

Syllabus: Intro Operational Guidance Adversarial ML Extraction Evasion Inversion Poisoning 02 Lossy Compression 04 Distance Metrics OSINT Inference Traffic Common Files Tooling Capability Development Conclusion Contact Info

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

HTTP/2: The Sequel is Always Worse

Syllabus: Intro Outline Request Smuggling via HTTP/2 downgrades H2.TE Desync: URL token hijack H2.TE Desync: Header hijack H2.X via Request Splitting - Resp Queue Poisoning H2.TE via request line injection Possible attacks No connection reuse Tunnelling…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Black Hat

Windows Defender - Demystifying and Bypassing ASR by Understanding the AV's Signatures

Syllabus: Intro ASR: Attack Surface Reduction Journey Windows Defender 101 Exploring WD internals WD: instrumentation Test your skills! Hunting for ASR rule implementation Windows Defender signatures Reading LUA scripts ASR: Implementation? ASR implement…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course