Ethical Hacking & Penetration Testing Bootcamp

This lesson provides an overview of the key themes presented at Black Hat Europe 2012.

This lesson explores the concept of sandboxing in the context of security at Black Hat Europe 2012.

This lesson details the methods used to compromise Cisco VoIP communications.

This lesson examines various database vulnerabilities and their implications.

This lesson contrasts human and computer approaches to virology in cybersecurity.

This lesson analyzes the security features of Apple and Google client platforms.

This lesson investigates vulnerabilities in IPv6 implementations through fragmentation attacks.

This lesson focuses on automating web application security tests beyond traditional scanning.

This lesson discusses techniques for bypassing Adobe Reader's sandbox using fuzzing.

This lesson covers the CANAPE framework for analyzing data packets.

This lesson assesses the risks of cyber-attacks on SAP systems and critical infrastructure.

This lesson explores methods for discovering zero-day vulnerabilities through data mining.

This lesson discusses the security vulnerabilities associated with Backend-As-A-Service architectures.

This lesson provides insights into the inner workings of the Blue Coat technology.

This lesson critiques the effectiveness of root detection mechanisms in mobile devices.

This lesson introduces the Androbugs Framework, a vulnerability scanner for Android applications.

This lesson explores techniques for attacking the XNU kernel in the El Capitan operating system.

This lesson discusses how backup channels can lead to authenticator leakage on Android devices.

This lesson covers the automation of Linux malware analysis using the Limon Sandbox.

This lesson demonstrates how to break access controls using a tool called Blekey.

This lesson examines methods for bypassing local Windows authentication to defeat full disk encryption.

This lesson addresses techniques for bypassing self-encrypting drives (SED) in enterprise environments.

This lesson focuses on detecting and exploiting command injection flaws using Commix.

This lesson explains why continuous integration tools can be advantageous for attackers.

This lesson covers the use of CANToolz for testing the security of vehicles.

This lesson explains old malware techniques and their persistence in modern cybersecurity.

This lesson evaluates the effectiveness of AI-based antivirus solutions in combating malware.

This lesson examines how smartphone CPU vulnerabilities can compromise security and privacy.

This lesson analyzes web application firewalls and their vulnerabilities through automata learning.

This lesson demonstrates methods for attacking Windows systems using Windows tools.

This lesson focuses on automating incident response to improve cybersecurity efficiency.

This lesson discusses techniques for hunting unknown vulnerability classes using scanning.

This lesson explores vulnerabilities in Belkin home automation devices and their exploitation.

This lesson covers methods for bypassing Clang's SafeStack security feature.

This lesson discusses fault injection techniques to bypass secure boot mechanisms.

This lesson presents a method for eliminating the BREACH attack through context hiding.

This lesson examines the process of token manipulation and its implications.

This lesson provides a retrospective case study on VMware guest-to-host escape vulnerabilities.

This lesson explores a universal controller designed to take over Z-Wave networks.

This lesson analyzes attacks on next-generation roaming networks.

This lesson covers attacks against GSMA's M2M remote provisioning system.

This lesson focuses on automatic discovery of evasion vulnerabilities through targeted protocol fuzzing.

This lesson offers insights into credential abuse and its implications.

This lesson introduces BlueBorne, a class of airborne attacks compromising Linux IoT devices.

This lesson discusses the theft of patient data through medical device vulnerabilities.

This lesson examines breaking out of HSTS and HPKP protections in various browsers.

This lesson investigates the potential backdooring of encryption systems and trust in foreign algorithms.

This lesson presents CALDERA, a tool for automating adversary emulation.

This lesson discusses a measured response to a specific cybersecurity threat.

This lesson examines the implications of AI-generated deep fakes and methods to counter them.

This lesson explores how resonance and physics can be used to attack hardware systems.

This lesson discusses strategies for attacking and defending blockchain technologies and secure wallet practices.

This lesson covers vulnerabilities in access points related to the BLEEDINGBIT exploit.

This lesson features the keynote address from the Black Hat Europe 2018 conference.

This lesson discusses the emergence of broken links and the future implications for software supply chain compromises.

This lesson covers the understanding of new threats and attacks in cloud-native sandboxes for microservices.

This lesson focuses on reducing the attack surface of containers beyond just namespace isolation.

This lesson presents insights into cutting-edge security features of Microsoft browsers from experienced professionals.

This lesson reflects on the evolving decisions and revisions within the Black Hat Network Operations Center.

This lesson teaches how to recognize unknown malicious activities using zero knowledge techniques.