Black Hat Europe 2022
45 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policyΒ recent).
Black Hat Europe 2022, ExCel London
Android Parcels: The Bad, the Good and the Better - Introducing Android's Safer Parcel
Breaking Kerberos' RC4 Cipher and Spoofing Windows PACs
Back-connect to the Connected Car. Search for Vulnerabilities in the VW Electric Car.
Bridging the Gap Between Research and Practice in Intelligently Bypassing WAF
Choo Choo, Network Train - The One to Rule Your Perimeter
Confidence in Chaos: Strategies for World-Class Security Operations
Cross-Contract Ricochet Attacks & Off-Chain-On-Chain Manipulation of Billion Dollar NFT Collections
CSI:Rowhammer: Closing the Case of Half-Double and Beyond
Deep into Android Bluetooth Bug Hunting: New Attack Surfaces and Weak Code Patterns
DataBinding2Shell: Novel Pathways to RCE Web Frameworks
Dirty Vanity: A New Approach to Code Injection & EDR Bypass
DnD: Decompiling Deep Neural Network Compiled Binary
Event-based Fuzzing, Patch-based Research, and Comment Police: Finding Bugs Through a Bug
Fail Harder: Finding Critical 0-Days in Spite of Ourselves
Exploring a New Class of Kernel Exploit Primitive
Fuzzing and Breaking Security Functions of SIMATIC PLCs
Good Motive but Bad Design: Pitfalls in MPU Usage in Embedded Systems in the Wild
Grand Theft Drone: Reaching Breaking Point in Drone Proprietary RF Link Security
How We Organize Large-Scale DDoS Exercises in the Netherlands
Design Flaws and Deployment Chaos in Cloud-based IoT Access Control Policies
Knockout Win Against TCC - 20+ NEW Ways to Bypass Your MacOS Privacy Mechanisms
LCDPwn: Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities Again
Locknote: Conclusions and Key Takeaways from Day 2
Microsoft Defender for Office 365 Evasion - The Story of Confirmed Vulnerability
From Finding New Type of Logical Flaw at Linux Kernel To Developing New Heap Exploitation Technique
Locknote: Conclusions and Key Takeaways from Day 1
Practically-exploitable Cryptographic Vulnerabilities in Matrix
Real-World Detection Evasion Techniques in the Cloud
Scammers Who Scam Scammers, Hackers Who Hack Hackers: Exploring a Sub-economy on Cybercrime Forums
Select Bugs From Binary Where Pattern Like CVE-1337-Days
Writing Your Own Ticket to the Cloud Like APT: A Dive to AD FS Attacks, Detections, and Mitigations
{JS-ON: Security-OFF}: Abusing JSON-Based SQL Queries
Abusing CNC Technologies
The Hacker's Guide to Policyland
Vlind Glitch: Blind VCC Glitching Technique to Bypass the Secure Boot of Qualcomm MSM8916 Mobile SoC
Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits
The Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?
Strengthening Cyber Resiliency in a Time of Geopolitical Crises...
Thresholds Are for Old Threats: Demystifying AI and Machine Learning to Enhance SOC Detection
Searching for RPC Functions to Coerce Authentications in Microsoft Protocols
Keynote - Our Kryptonite: A Defendable Internet
Unwinding the Stack for Fun and Profit
The Black Hat Europe NOC Report
Keynote - Cybersecurity: The Next Generation