Black Hat
3152 videos enrolled · 1 in the catalog · 1 failed
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Its playlists 50
The channel's own playlists, each with its videos in its own order. 610 of the channel's 3152 videos are in none of them.
- Black Hat Asia 2014
- Black Hat Asia 2015
- Black Hat Asia 2016
- Black Hat Asia 2017
- Black Hat Asia 2018
- Black Hat Asia 2019
- Black Hat Asia 2020
- Black Hat Asia 2021
- Black Hat Asia 2022
- Black Hat Asia 2023
- Black Hat Asia 2024
- Black Hat Asia 2025
- Black Hat Asia 2026
- Black Hat Europe 2014
- Black Hat Europe 2015
- Black Hat Europe 2016
- Black Hat Europe 2017
- Black Hat Europe 2018
- Black Hat Europe 2019
- Black Hat Europe 2020
- Black Hat Europe 2021
- Black Hat Europe 2022
- Black Hat Europe 2023
- Black Hat Europe 2024
- Black Hat Europe 2025
- Black Hat Europe 2026
- Black Hat Fast Chats
- Black Hat Intercepted
- Black Hat Stories
- Black Hat USA 2013
- Black Hat USA 2014
- Black Hat USA 2015
- Black Hat USA 2016
- Black Hat USA 2017
- Black Hat USA 2018
- Black Hat USA 2019
- Black Hat USA 2020
- Black Hat USA 2021
- Black Hat USA 2022
- Black Hat USA 2023
- Black Hat USA 2024
- Black Hat USA 2025
- Black Hat USA 2026
- Black Hat Vault
- Black Hat Webcasts
- Executive Interviews
- SecTor 2024
- SecTor 2025
- SecTor 2026
- Speaker Spotlight Videos
When a Zero Day and Access Keys Collide in the Cloud: Responding to the SugarCRM 0-Day Vulnerability
When The Front Door Becomes a Backdoor: The Security Paradox of OSDP
Windows Agentless C2: (Ab)using the MDM Client Stack
You Shall Not PASS - Analysing a NSO iOS Spyware Sample
Zero-Touch-Pwn: Abusing Zoom's Zero Touch Provisioning for Remote Attacks on Desk Phones
"No Mr. Cyber Threat!" - A Psychological Approach To Managing the Fail-to-Challenge Vulnerability
(Long) Dragon Tails – Measuring Dependence on International Vulnerability Research
{JS-ON: Security-OFF}: Abusing JSON-Based SQL Queries
A Dirty Little History: Bypassing Spectre Hardware Defenses to Leak Kernel Data
A Fully Trained Jedi, You Are Not
A Journey Into Fuzzing WebAssembly Virtual Machines
A New Attack Interface in Java Applications
A New Trend for the Blue Team: Using a Symbolic Engine to Detect Evasive Forms of Malware/Ransomware
A Run a Day Won't Keep the Hacker Away: Inference Attacks in Fitness Tracking Social Networks
AAD Joined Machines - The New Lateral Movement
Abusing Azure Active Directory: From MFA Bypass to Listing Global Administrators
Abusing CNC Technologies
AEPIC Leak: Architecturally Leaking Uninitialized Data from the Microarchitecture
Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits
Alice in Kernel Land: Lessons Learned From the eBPF Rabbit Hole
All Your GNN Models and Data Belong to Me
Android Parcels: The Bad, the Good and the Better - Introducing Android's Safer Parcel
Android Universal Root: Exploiting Mobile GPU / Command Queue Drivers
Attack on Titan M, Reloaded: Vulnerability Research on a Modern Security Chip
Attacking the WebAssembly Compiler of WebKit
Attacks From a New Front Door in 4G & 5G Mobile Networks
Automatic Protocol Reverse Engineering
Back-connect to the Connected Car. Search for Vulnerabilities in the VW Electric Car.
Backdooring and Hijacking Azure AD Accounts by Abusing External Identities
Behind the Scenes: How Criminal Enterprises Pre-infect Millions of Mobile Devices
Better Privacy Through Offense: How To Build a Privacy Red Team
Black Hat Asia 2023 Highlights
Black Hat Europe 2022, ExCel London
Black Hat USA 2023 Highlights
Black Hat USA 2023 Preview Video
Blasting Event-Driven Cornucopia: WMI-based User-Space Attacks Blind SIEMs and EDRs
Breaking Firmware Trust From Pre-EFI: Exploiting Early Boot Phases
Breaking Kerberos' RC4 Cipher and Spoofing Windows PACs
Breaking Managed Data Services in the Cloud
Breaking the Chain: An Attacker's Perspective on Supply Chain Vulnerabilities and Flaws
Breaking the Chrome Sandbox with Mojo
Bridging the Gap Between Research and Practice in Intelligently Bypassing WAF
BrokenMesh: New Attack Surfaces of Bluetooth Mesh
Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling
Bug Bounty Evolution: Not Your Grandson's Bug Bounty
Bug Hunters Dump User Data. Can They Keep it? Well They're Keeping it Anyway.
Bypassing Anti-Cheats & Hacking Competitive Games
Calculating Risk in the Era of Obscurity: Reading Between the Lines of Security Advisories
CastGuard: Mitigating Type Confusion in C++
Catch Me If You Can: Deterministic Discovery of Race Conditions with Fuzzing
Cautious: A New Exploitation Method! No Pipe but as Nasty as Dirty Pipe
Charged by an Elephant – An APT Fabricating Evidence to Throw You In Jail
Chasing Your Tail With a Raspberry Pi
Choo Choo, Network Train - The One to Rule Your Perimeter
Cloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
Confidence in Chaos: Strategies for World-Class Security Operations
Controlling the Source: Abusing Source Code Management Systems
Cross-Contract Ricochet Attacks & Off-Chain-On-Chain Manipulation of Billion Dollar NFT Collections
CSI:Rowhammer: Closing the Case of Half-Double and Beyond
Custom Processing Unit: Tracing and Patching Intel Atom Microcode
DataBinding2Shell: Novel Pathways to RCE Web Frameworks
Deception at Scale: How Malware Abuses Trust
Deep into Android Bluetooth Bug Hunting: New Attack Surfaces and Weak Code Patterns
Déjà Vu: Uncovering Stolen Algorithms in Commercial Products
Demystifying Key Stretching and PAKEs
Design Flaws and Deployment Chaos in Cloud-based IoT Access Control Policies
Devils Are in the File Descriptors: It Is Time To Catch Them All
Dilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway
DirectX: The New Hyper-V Attack Surface
Dirty Bin Cache: A New Code Injection Poisoning Binary Translation Cache
Dirty Stream Attack, Turning Android Share Targets Into Attack Vectors
Dirty Vanity: A New Approach to Code Injection & EDR Bypass
Dive Into Apple IO80211Family Vol. 2
DnD: Decompiling Deep Neural Network Compiled Binary
DNSSEC Downgrade Attacks
Do Not Trust the ASA, Trojans!
E-Meet (or Emit?) My Keystrokes: How Benign Screen-sharing Meetings Could Leak Typing Behaviors
eBPF ELFs JMPing Through the Windows
ElectroVolt: Pwning Popular Desktop Apps While Uncovering New Attack Surface on Electron
Elevating Kerberos to the Next Level
ELF Section Docking: Revisiting Stageless Payload Delivery
Eliminating Triage Intermediaries for Zero-day Exploits Using a Decentralised Payout Protocol
Engaging the Next Generation of Cybersecurity Professionals: The Power of Security Zines
Event-based Fuzzing, Patch-based Research, and Comment Police: Finding Bugs Through a Bug
Exploring a New Class of Kernel Exploit Primitive
Fail Harder: Finding Critical 0-Days in Spite of Ourselves
Fault-Injection Detection Circuits: Design, Calibration, Validation and Tuning
Fireside Chat: Jeff Moss and Gaurav Keerthi
firmWar: An Imminent Threat to the Foundation of Computing
Forward Focus – The Impact of Artificial Intelligence
From Finding New Type of Logical Flaw at Linux Kernel To Developing New Heap Exploitation Technique
From Hackathon to Hacked: Web3's Security Journey
Fuzzing and Breaking Security Functions of SIMATIC PLCs
Fuzzing the Native NTFS Read-Write Driver (NTFS3) in the Linux Kernel
Ghost in the Wireless, iwlwifi Edition
Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal
Go With the Flow: Enforcing Program Behavior Through Syscall Sequences and Origins
Good Motive but Bad Design: Pitfalls in MPU Usage in Embedded Systems in the Wild
Google Reimagined a Phone. It was Our Job to Red Team and Secure it.
Grand Theft Drone: Reaching Breaking Point in Drone Proprietary RF Link Security