Black Hat USA 2018
134 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Black Hat USA 2018 Keynote: Parisa Tabriz
How can Communities Move Forward After Incidents of Sexual Harassment or Assault?
Unpacking the Packed Unpacker: Reverse Engineering an Android Anti-Analysis Native Library
Fire & Ice: Making and Breaking macOS Firewalls
Practical Web Cache Poisoning: Redefining 'Unexploitable'
An Attacker Looks at Docker: Approaching Multi-Container Applications
SirenJack: Cracking a 'Secure' Emergency Warning Siren System
Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies
GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs
Finding Xori: Malware Analysis Triage with Automated Disassembly
Miasm: Reverse Engineering Framework
Over-the-Air: How we Remotely Compromised the Gateway, BCM, and Autopilot ECUs of Tesla Cars
DeepLocker - Concealing Targeted Attacks with AI Locksmithing
It's a PHP Unserialization Vulnerability Jim, but Not as We Know It
Day Zero: A Road Map to #BHUSA 2018
Lessons and Lulz: The 4th Annual Black Hat USA NOC Report
Return of Bleichenbacher's Oracle Threat (ROBOT)
An Attacker Looks at Docker: Approaching Multi-Container Applications
Follow the White Rabbit: Simplifying Fuzz Testing Using FuzzExMachina
The Finest Penetration Testing Framework for Software-Defined Networks
Understanding and Exploiting Implanted Medical Devices![Mainframe [z/OS] Reverse Engineering and Exploit Development](https://i.ytimg.com/vi/3K80dWbQsqE/mqdefault.jpg)
Mainframe [z/OS] Reverse Engineering and Exploit Development
Lowering the Bar: Deep Learning for Side Channel Analysis
Hardening Hyper-V through Offensive Security Research
SirenJack: Cracking a 'Secure' Emergency Warning Siren System
Practical Web Cache Poisoning: Redefining 'Unexploitable'
IoT Malware: Comprehensive Survey, Analysis Framework and Case Studies
SDL the Wont Break the Bank
For the Love of Money: Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems
Last Call for SATCOM Security
Exploitation of a Modern Smartphone Baseband
Automated Discovery of Deserialization Gadget Chains
Legal Liability for IOT Cybersecurity Vulnerabilities
Another Flip in the Row
How can Someone with Autism Specifically Enhance the Cyber Security Workforce?
Catch me, Yes we can! - Pwning Social Engineers
Automating Exploit Generation for Arbitrary Types of Kernel Vulnerabilities
Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator
Protecting the Protector, Hardening Machine Learning Defenses Against Adversarial Attacks
Playback: A TLS 1.3 Story
An Inside Story of Mitigating Speculative Execution Side Channel Vulnerabilities
TLBleed: When Protecting Your CPU Caches is Not Enough
None of My Pixel is Your Business: Active Watermarking Cancellation Against Video Streaming Service
So I became a Domain Controller
WebAssembly: A New World of Native Exploits on the Browser
Outsmarting the Smart City
Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies
AI & ML in Cyber Security - Why Algorithms are Dangerous
Stealth Mango and the Prevalence of Mobile Surveillanceware
Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels
A Deep Dive into macOS MDM (and How it can be Compromised)
Pestilential Protocol: How Unsecure HL7 Messages Threaten Patient Lives
GOD MODE UNLOCKED - Hardware Backdoors in x86 CPUs
Decompiler Internals: Microcode
Detecting Malicious Cloud Account Behavior: A Look at the New Native Platform Capabilities
Windows Notification Facility: Peeling the Onion of the Most Undocumented Kernel Attack Surface Yet
Kernel Mode Threats and Practical Defenses
New Norms and Policies in Cyber-Diplomacy
Snooping on Cellular Gateways and Their Critical Role in ICS
Your Voice is My Passport
Reconstruct the World from Vanished Shadow: Recovering Deleted VSS Snapshots
Identity Theft: Attacks on SSO Systems
The Science of Hiring and Retaining Female Cybersecurity Engineers
Black Box is Dead. Long Live Black Box!
Fire & Ice: Making and Breaking macOS Firewalls
Demystifying PTSD in the Cybersecurity Environment
The Problems and Promise of WebAssembly
Real Eyes, Realize, Real Lies: Beating Deception Technologies
ARTist - An Instrumentation Framework for Reversing and Analyzing Android Apps and the Middleware
Money-rity Report: Using Intelligence to Predict the Next Payment Card Fraud Victims
Lessons from Virginia - A Comparative Forensic Analysis of WinVote Voting Machines
Stop that Release, There's a Vulnerability!
Pwnie Awards
Beating the Blockchain by Mapping Out Decentralized Namecoin and Emercoin Infrastructure
Applied Self-Driving Car Security
Is the Mafia Taking Over Cybercrime?
AFL's Blindspot and How to Resist AFL Fuzzing for Arbitrary ELF Binaries
Back to the Future: A Radical Insecure Design of KVM on ARM
I, for One, Welcome Our New Power Analysis Overlords
How can Communities Move Forward After Incidents of Sexual Harassment or Assault?
The Air-Gap Jumpers
Attacks on the Curl-P Hash Function Leading to Signature Forgeries in the IOTA Signature Scheme
InfoSec Philosophies for the Corrupt Economy
ZEROing Trust: Do Zero Trust Approaches Deliver Real Security?
Breaking the IIoT: Hacking industrial Control Gateways
Holding on for Tonight: Addiction in InfoSec
Dissecting Non-Malicious Artifacts: One IP at a Time
How I Learned to Stop Worrying and Love the SBOM
Why so Spurious? Achieving Local Privilege Escalation on Operating Systems
Breaking Parser Logic: Take Your Path Normalization off and Pop 0days Out!
A Brief History of Mitigation: The Path to EL1 in iOS 11
Squeezing a Key through a Carry Bit
Behind the Speculative Curtain: The True Story of Fighting Meltdown and Spectre
LTE Network Automation Under Threat
Every ROSE has its Thorn: The Dark Art of Remote Online Social Engineering
From Workstation to Domain Admin: Why Secure Administration isn't Secure and How to Fix it
Don't @ Me: Hunting Twitter Bots at Scale
Subverting Sysmon: Application of a Formalized Security Product Evasion Methodology
WireGuard: Next Generation Secure Network Tunnel
The Unbearable Lightness of BMC's