Black Hat USA 2016
120 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Keynote: The Hidden Architecture of our Time: Why This Internet Worked, How We Could Lose It...
When the Cops Come A-Knocking: Handling Technical Assistance Demands from Law Enforcement
Certificate Bypass: Hiding and Executing Malware from a Digitally Signed Executable
HEIST: HTTP Encrypted Information can be Stolen Through TCP-Windows
A Lightbulb Worm?
AirBnBeware: Short Term Rentals Long Term Pwnage
HTTP Cookie Hijacking in the Wild: Security and Privacy Implications
Behind the Scenes of iOS Security
Panel: Removing Roadblocks to Diversity
Defense at Hyperscale: Technologies and Policies for a Defensible Cyberspace
A Retrospective on the Use of Export Cryptography
Abusing Bleeding Edge Web Standards for Appsec Glory
Augmenting Static Analysis Using Pintool: Ablation
Beyond the Mcse: Active Directory for the Security Professional
Breaking Payment Points of Interaction (POI)
Can You Trust Me Now? An Exploration Into the Mobile Threat Landscape
Capturing 0Day Exploits With Perfectly Placed Hardware Traps
HTTP/2 & Quic - Teaching Good Protocols to Do Bad Things
The Linux Kernel Hidden Inside Windows 10
$Hell on Earth: From Browser to System Compromise
A Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream Land
Applied Machine Learning for Data Exfil and Other Fun Topics
Exploiting Curiosity and Context: How to Make People Click on a Dangerous Link...
Hackproofing Oracle Ebusiness Suite
Measuring Adversary Costs to Exploit Commercial Software...
Memory Forensics Using Virtual Machine Introspection for Cloud Computing
Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS
Subverting Apple Graphics: Practical Approaches to Remotely Gaining Root
Adaptive Kernel Live Patching: An Open Collaborative Effort...
Canspy: A Platform for Auditing Can Devices
Drone Attacks on Industrial Wireless: A New Front in Cyber Security
Gattacking Bluetooth Smart Devices - Introducing a New BLE Proxy Tool
Secure Penetration Testing Operations: Demonstrated Weaknesses in Learning Material and Tools
Towards a Holistic Approach in Building Intelligence to Fight Crimeware
1000 Ways to Die in Mobile Oauth
Xenpwn: Breaking Paravirtualized Devices
AMSI: How Windows 10 Plans to Stop Script-Based Attacks and How Well It Does It
An Insider's Guide to Cyber-Insurance and Security Guarantees
I Came to Drop Bombs: Auditing the Compression Algorithm Weapon Cache
Does Dropping USB Drives in Parking Lots and Other Places Really Work?
Into the Core: In-Depth Exploration of Windows 10 IoT Core
Intra-Process Memory Protection for Applications on ARM and X86: Leveraging the ELF ABI
Pwning Your Java Messaging With Deserialization Vulnerabilities
Recover a RSA Private Key From a TLS Session With Perfect Forward Secrecy
Access Keys Will Kill You Before You Kill the Password
Account Jumping Post Infection Persistency & Lateral Movement in AWS
Breaking Kernel Address Space Layout Randomization (KASLR) With Intel TSX
Crippling HTTPs With Unholy PAC
Design Approaches for Security Automation
GreatFET: Making GoodFET Great Again
Using EMET to Disable EMET
Viral Video - Exploiting SSRF in Video Converters
AVLeak: Fingerprinting Antivirus Emulators for Advanced Malware Evasion
Brute-Forcing Lockdown Harddrive Pin Codes
Building a Product Security Incident Response Team: Learnings From the Hivemind
Cyber War in Perspective: Analysis From the Crisis in Ukraine
Security Through Design - Making Security Better By Designing for People
Side-Channel Attacks on Everyday Applications
The Risk From Power Lines: How to Sniff the G3 and Prime Data and Detect the Interfere Attack
Unleash the Infection Monkey: A Modern Alternative to Pen-Tests
Watching Commodity Malware Get Sold to a Targeted Actor
BadTunnel: How Do I Get Big Brother Power?
Blunting the Phisher's Spear: A Risk-Based Approach...
Dungeons Dragons and Security
Dark Side of the DNS Force
Keystone Engine: Next Generation Assembler Framework
Pindemonium: A DBI-Based Generic Unpacker for Windows Executable
Samsung Pay: Tokenized Numbers Flaws and Issues
What's the DFIRence for ICS?
Defense At Hyperscale: Technologies and Policies for a Defensible Cyberspace
Ouroboros: Tearing Xen Hypervisor With the Snake
Advanced CAN Injection Techniques for Vehicle Networks
TCP Injection Attacks in the Wild - a Large Scale Study
The Remote Malicious Butler Did It!
Windows 10 Segment Heap Internals
The Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
Understanding HL7 2.X Standards, Pen Testing, and Defending HL7 2.X Messages
Analysis of the Attack Surface of Windows 10 Virtualization-Based Security
Cunning With CNG: Soliciting Secrets From Schannel
Demystifying the Secure Enclave Processor
Hacking Next-Gen ATMs: From Capture to Cashout
Next-Generation of Exploit Kit Detection By Building Simulated Obfuscators
Investigating DDOS - Architecture Actors and Attribution
O-Checker: Detection of Malicious Documents Through Deviation From File Format Specifications
Language Properties of Phone Scammers: Cyberdefense At the Level of the Human
The Tao of Hardware the Te of Implants
BadWPAD
Hardening AWS Environments and Automating Incident Response for AWS Compromises
Horse Pill: A New Type of Linux Rootkit
Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf
SGX Secure Enclaves in Practice: Security and Crypto Review
Weaponizing Data Science for Social Engineering: Automated E2E Spear Phishing on Twitter
Windows 10 Mitigation Improvements
Bad for Enterprise: Attacking BYOD Enterprise Mobile Security Solutions
Breaking FIDO: Are Exploits in There?
Iran's Soft-War for Internet Dominance
OSS Security Maturity: Time to Put on Your Big Boy Pants!
Pangu 9 Internals
PLC-Blaster: A Worm Living Solely in the PLC
The Year in Flash