Black Hat

Black Hat

Latest Videos

New Techniques for Split-Second DNS Rebinding
New Techniques for Split-Second DNS Rebinding
Indirect Prompt Injection Into LLMs Using Images and Sounds
Indirect Prompt Injection Into LLMs Using Images and Sounds
Black Hat USA 2024 - Vertical Reel
Black Hat USA 2024 - Vertical Reel
Reverse Engineering the Customized Pointer Authentication Hardware Implementation on Apple M1
Reverse Engineering the Customized Pointer Authentication Hardware Implementation on Apple M1
BingBang Hacking Bing.com and much more with Azure Active Directory
BingBang Hacking Bing.com and much more with Azure Active Directory
Endoscope Unpacking Android Apps with VM-Based Obfuscation
Endoscope Unpacking Android Apps with VM-Based Obfuscation
Evading Logging in the Cloud Bypassing AWS CloudTrail
Evading Logging in the Cloud Bypassing AWS CloudTrail
All Cops Are Broadcasting Breaking TETRA After Decades in the Shadows
All Cops Are Broadcasting Breaking TETRA After Decades in the Shadows
Jailbreaking an Electric Vehicle in 2023 or What It Means to Hotwire Teslas x86-Based Seat Heater
Jailbreaking an Electric Vehicle in 2023 or What It Means to Hotwire Teslas x86-Based Seat Heater
Scammers Who Scam Scammers Hackers Who Hack Hackers Exploring a Sub-economy on Cybercrime Forums
Scammers Who Scam Scammers Hackers Who Hack Hackers Exploring a Sub-economy on Cybercrime Forums
Keynote - Cybersecurity The Next Generation
Keynote - Cybersecurity The Next Generation
{JS-ON Security-OFF} Abusing JSON-Based SQL Queries
{JS-ON Security-OFF} Abusing JSON-Based SQL Queries
Ret2page The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache
Ret2page The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache
Talent Need Not Apply Tradecraft and Objectives of Job-themed APT Social Engineering
Talent Need Not Apply Tradecraft and Objectives of Job-themed APT Social Engineering
Attack on Titan M Reloaded Vulnerability Research on a Modern Security Chip
Attack on Titan M Reloaded Vulnerability Research on a Modern Security Chip
Attacks From a New Front Door in 4G & 5G Mobile Networks
Attacks From a New Front Door in 4G & 5G Mobile Networks
Android Universal Root Exploiting Mobile GPU Command Queue Drivers
Android Universal Root Exploiting Mobile GPU Command Queue Drivers
AAD Joined Machines - The New Lateral Movement
AAD Joined Machines - The New Lateral Movement
A Journey Into Fuzzing WebAssembly Virtual Machines
A Journey Into Fuzzing WebAssembly Virtual Machines
A New Trend for the Blue Team Using a Symbolic Engine to Detect Evasive Forms of MalwareRansomware
A New Trend for the Blue Team Using a Symbolic Engine to Detect Evasive Forms of MalwareRansomware
Monitoring Surveillance Vendors A Deep Dive into In-the-Wild Android Full Chains in 2021
Monitoring Surveillance Vendors A Deep Dive into In-the-Wild Android Full Chains in 2021
Better Privacy Through Offense How To Build a Privacy Red Team
Better Privacy Through Offense How To Build a Privacy Red Team
Unlimited Results Breaking Firmware Encryption of ESP32-V3
Unlimited Results Breaking Firmware Encryption of ESP32-V3
Backdooring and Hijacking Azure AD Accounts by Abusing External Identities
Backdooring and Hijacking Azure AD Accounts by Abusing External Identities
Automatic Protocol Reverse Engineering
Automatic Protocol Reverse Engineering
Keynote Black Hat at 25 Where Do We Go from Here?
Keynote Black Hat at 25 Where Do We Go from Here?
Pre-Stuxnet Post-Stuxnet Everything Has Changed Nothing Has Changed
Pre-Stuxnet Post-Stuxnet Everything Has Changed Nothing Has Changed
RCE-as-a-Service Lessons Learned from 5 Years of Real-World CICD Pipeline Compromise
RCE-as-a-Service Lessons Learned from 5 Years of Real-World CICD Pipeline Compromise
Breaking Firmware Trust From Pre-EFI Exploiting Early Boot Phases
Breaking Firmware Trust From Pre-EFI Exploiting Early Boot Phases
The Growth of Global Election Disinformation The Role Methodology of Government-linked Cyber Actors
The Growth of Global Election Disinformation The Role Methodology of Government-linked Cyber Actors
Browser-Powered Desync Attacks A New Frontier in HTTP Request Smuggling
Browser-Powered Desync Attacks A New Frontier in HTTP Request Smuggling
The Open Threat Hunting Framework Enabling Organizations to Build Operationalize and Scale Threat
The Open Threat Hunting Framework Enabling Organizations to Build Operationalize and Scale Threat
BrokenMesh New Attack Surfaces of Bluetooth Mesh
BrokenMesh New Attack Surfaces of Bluetooth Mesh
XMPP Stanza Smuggling or How I Hacked Zoom
XMPP Stanza Smuggling or How I Hacked Zoom
Real Cyber War Espionage DDoS Leaks and Wipers in the Russian Invasion of Ukraine
Real Cyber War Espionage DDoS Leaks and Wipers in the Russian Invasion of Ukraine
Smishmash - Text Based 2fa Spoofing Using OSINT Phishing Techniques and a Burner Phone
Smishmash - Text Based 2fa Spoofing Using OSINT Phishing Techniques and a Burner Phone
Breaking the Chrome Sandbox with Mojo
Breaking the Chrome Sandbox with Mojo
Catch Me If You Can Deterministic Discovery of Race Conditions with Fuzzing
Catch Me If You Can Deterministic Discovery of Race Conditions with Fuzzing
Locknote Conclusions and Key Takeaways from Black Hat USA 2022
Locknote Conclusions and Key Takeaways from Black Hat USA 2022
RollBack - A New Time-Agnostic Replay Attack Against the Automotive Remote Keyless Entry Systems
RollBack - A New Time-Agnostic Replay Attack Against the Automotive Remote Keyless Entry Systems
Chasing Your Tail With a Raspberry Pi
Chasing Your Tail With a Raspberry Pi
The Battle Against the Billion-Scale Internet Underground Industry Advertising Fraud Detection
The Battle Against the Billion-Scale Internet Underground Industry Advertising Fraud Detection
Glitched on Earth by Humans A Black-Box Security Evaluation of the SpaceX Starlink User Terminal
Glitched on Earth by Humans A Black-Box Security Evaluation of the SpaceX Starlink User Terminal
From Hackathon to Hacked Web3s Security Journey
From Hackathon to Hacked Web3s Security Journey
Custom Processing Unit Tracing and Patching Intel Atom Microcode
Custom Processing Unit Tracing and Patching Intel Atom Microcode
ElectroVolt Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron
ElectroVolt Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron
Elevating Kerberos to the Next Level
Elevating Kerberos to the Next Level
TruEMU An Extensible Open-Source Whole-System iOS Emulator
TruEMU An Extensible Open-Source Whole-System iOS Emulator
Black Hat Europe 2022 ExCel London
Black Hat Europe 2022 ExCel London
macOS Vulnerabilities Hiding in Plain Sight
macOS Vulnerabilities Hiding in Plain Sight