Black Hat USA 2015
113 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
The Lifecycle of a Revolution (Keynote)
Dance Like Nobodys Watching Encrypt Like Everyone Is: A Peek Inside the Black Hat Network
Stagefright: Scary Code in the Heart of Android
Big Game Hunting: The Peculiarities of Nation-State Malware Research
TrustKit: Code Injection on iOS 8 for the Greater Good
Repurposing OnionDuke: A Single Case Study Around Reusing Nation State Malware
Bring Back the Honeypots
Exploiting the DRAM Rowhammer Bug to Gain Kernel Privileges
Emanate Like A Boss: Generalized Covert Data Exfiltration With Funtenna
Server-Side Template Injection: RCE For The Modern Web App
Targeted Takedowns: Minimizing Collateral Damage Using Passive DNS
The Little Pump Gauge That Could: Attacks Against Gas Pump Monitoring Systems
The Applications Of Deep Learning On Traffic Identification
The Node.js Highway: Attacks Are At Full Throttle
Battle Of The SKM And IUM: How Windows 10 Rewrites OS Architecture
Taking Event Correlation With You
Internet-Scale File Analysis
ThunderStrike 2: Sith Strike
Hidden Risks Of Biometric Identifiers And How To Avoid Them
How To Hack Government: Technologists As Policy Makers
Breaking HTTPS With BGP Hijacking
Data-Driven Threat Intelligence: Metrics On Indicator Dissemination And Sharing
WSUSpect - Compromising The Windows Enterprise Via Windows Update
Faux Disk Encryption: Realities Of Secure Storage On Mobile Devices
Subverting Satellite Receivers For Botnet And Profit
CrackLord: Maximizing Password Cracking Boxes
Web Timing Attacks Made Practical
Breaking Access Controls With BLEKey
Forging The USB Armory, An Open Source Secure Flash-Drive-Sized Computer
When IoT Attacks: Hacking A Linux-Powered Rifle
Abusing XSLT For Practical Attacks
Internet Plumbing for Security Professionals: The State Of BGP Security
Adventures In Femtoland: 350 Yuan For Invaluable Fun
Optimized Fuzzing IOKit In iOS
Graphic Content Ahead: Towards Automated Scalable Analysis Of Graphical Images Embedded In Malware
Remote Physical Damage 101 - Bread And Butter Attacks
Panel: How The Wassenaar Arrangement's Export Control Of "Intrusion Software" Affects Industry
Is The NSA Still Listening To Your Phone Calls? A Surveillance Debate
Rocking The Pocket Book: Hacking Chemical Plant For Competition And Extortion
Harnessing Intelligence From Malware Repositories
Writing Bad @$$ Malware For OS X
Red Vs. Blue: Modern Active Directory Attacks, Detection, And Protection
Remote Exploitation Of An Unaltered Passenger Vehicle
Abusing Windows Management Instrumentation (WMI)
Cloning 3G/4G SIM Cards With A PC And An Oscilloscope: Lessons Learned In Physical Security
Defeating Pass-the-Hash: Separation Of Powers
The NSA Playset: A Year Of Toys And Tools
Defeating Machine Learning: What Your Security Vendor Is Not Telling You
Automated Human Vulnerability Scanning With AVA
Advanced IC Reverse Engineering Techniques: In Depth Analysis Of A Modern Smart Card
Most Ransomware Isn't As Complex As You Might Think
From False Positives To Actionable Analysis
Android Security State Of The Union
Winning The Online Banking War
GameOver Zeus: Badguys And Backends
Attacking Hypervisors Using Firmware And Hardware
Commercial Mobile Spyware - Detecting The Undetectable
The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation
Ah! Universal Android Rooting Is Back
Fingerprints On Mobile Devices: Abusing And Leaking
Pen Testing A City
Social Engineering The Windows Kernel: Finding And Exploiting Token Handling Vulnerabilities
Take A Hacker To Work Day - How Federal Prosecutors Use The CFAA
SMBv2: Sharing More Than Just Your Files
Back Doors And Front Doors Breaking The Unbreakable System
Crash & Pay: How To Own And Clone Contactless Payment Devices
How Vulnerable Are We To Scams?
ROPInjector: Using Return Oriented Programming For Polymorphism And Antivirus Evasion
Bringing A Cannon To A Knife Fight
How To Implement IT Security After A Cyber Meltdown
ZigBee Exploited The Good, The Bad, And The Ugly
Broadcasting Your Attack: Security Testing DAB Radio In Cars
Deep Learning On Disassembly
Exploiting Out-of-Order Execution For Covert Cross-VM Communication
Why Security Data Science Matters And How It's Different
Abusing Silent Mitigations - Understanding Weaknesses Within Internet Explorer
Switches Get Stitches
Securing Your Big Data Environment
Attacking ECMAScript Engines With Redefinition
My Bro The ELK: Obtaining Context From Security Events
Certifi-gate: Front-Door Access To Pwning Millions Of Androids
Return To Where? You Can't Exploit What You Can't Find
Bypass Control Flow Guard Comprehensively
Assessing And Exploiting BigNum Vulnerabilities
HI THIS IS URGENT PLZ FIX ASAP: Critical Vulnerabilities And Bug Bounty Programs
FileCry - The New Age Of XXE
Spread Spectrum Satcom Hacking: Attacking The Globalstar Simplex Data Service
The Battle For Free Speech On The Internet
The Tactical Application Security Program: Getting Stuff Done
Distributing The Reconstruction Of High-Level Intermediate Representation...
Mobile Point Of Scam: Attacking The Square Reader
Exploiting XXE Vulnerabilities In File Parsing Functionality
Bypass Surgery Abusing Content Delivery Networks With...
Staying Persistent In Software Defined Networks
Breaking Honeypots For Fun And Profit
Understanding The Attack Surface And Attack Resilience Of Project Spartan's New EdgeHTML...
Using Static Binary Analysis To Find Vulnerabilities And Backdoors In Firmware
API Deobfuscator: Resolving Obfuscated API Functions In Modern Packers
Understanding And Managing Entropy Usage
Unicorn: Next Generation CPU Emulator Framework