Black Hat USA 2017
89 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Black Hat USA 2017 Keynote
Making Diversity a Priority in Security
Ochko123 - How the Feds Caught Russian Mega-Carder Roman Seleznev
Revoke-Obfuscation: PowerShell Obfuscation Detection (And Evasion) Using Science
Breaking the x86 Instruction Set
Cloak & Dagger: From Two Permissions to Complete Control of the UI Feedback Loop
Ichthyology: Phishing as a Science
Broadpwn: Remotely Compromising Android and iOS via a Bug in Broadcom's Wi-Fi Chipsets
Cracking the Lens: Targeting HTTP's Hidden Attack-Surface
An ACE Up the Sleeve: Designing Active Directory DACL Backdoors
(in)Security in Building Automation: How to Create Dark Buildings with Light Speed
Behind the Plexiglass Curtain: Stats and Stories from the Black Hat NOC
How We Created the First SHA-1 Collision and What it Means for Hash Security
Bochspwn Reloaded: Detecting Kernel Memory Disclosure with x86 Emulation and Taint Tracking
Exploiting Network Printers
Why Most Cyber Security Training Fails and What We Can Do About it
Breaking the Laws of Robotics: Attacking Industrial Robots
Infecting the Enterprise: Abusing Office365+Powershell for Covert C2
Digital Vengeance: Exploiting the Most Notorious C&C Toolkits
Network Automation is Not Your Safe Haven
Developing Trust and Gitting Betrayed
How Abusing Docker API Led to Remote Code Execution, Same Origin Bypass & more
Attacking Encrypted USB Keys the Hard(ware) Way
Game of Chromes: Owning the Web with Zombie Chrome Extensions
Challenges of Cooperation Across Cyberspace
Honey, I Shrunk the Attack Surface – Adventures in Android Security Hardening
Escalating Insider Threats Using VMware's API
Tracking Ransomware End to End
The Industrial Revolution of Lateral Movement
Redesigning PKI to Solve Revocation Expiration and Rotation Problems
Practical Tips for Defending Web Applications in the Age of DevOps
Betraying the BIOS: Where the Guardians of the BIOS are Failing
Fad or Future? Getting Past the Bug Bounty Hype
Web Cache Deception Attack
ShieldFS: The Last Word in Ransomware Resilient File Systems
OpenCrypto: Unchaining the JavaCard Ecosystem
Exploit Kit Cornucopia
Hacking Serverless Runtimes: Profiling AWS Lambda Azure Functions & More
Hacking Hardware with a $10 SD Card Reader
Datacenter Orchestration Security and Insecurity: Assessing Kubernetes, Mesos, and Docker at Scale
Evading Microsoft ATA for Active Directory Domination
Breaking XSS Mitigations Via Script Gadgets
WiFuzz: Detecting and Exploiting Logical Flaws in the Wi-Fi Cryptographic Handshake
Friday the 13th: JSON Attacks
All Your SMS & Contacts Belong to ADUPS & Others
They're Coming for Your Tools: Exploiting Design Flaws for Active Intrusion Prevention
Exploiting a Single SQLite Vulnerability Across Multiple Software
The Active Directory Botnet
Automated Testing of Crypto Software Using Differential Fuzzing
Big Game Theory Hunting: The Peculiarities of Human Behavior in the InfoSec Game
Go to Hunt, Then Sleep
PEIMA: Harnessing Power Laws to Detect Malicious Activities
Adventures in Attacking Wind Farm Control Networks
kR^X: Comprehensive Kernel Protection Against Just-In-Time Code Reuse
Intercepting iCloud Keychain
Defeating Samsung KNOX with Zero Privilege
The Epocholypse 2038: What's in Store for the Next 20 Years
Bug Collisions Meet Government Vulnerability Disclosure
Intel AMT Stealth Breakthrough
The Adventures of AV and the Leaky Sandbox
IoTCandyJar: Towards an Intelligent-Interaction Honeypot for IoT Devices
Lies and Damn Lies: Getting Past the Hype of Endpoint Security Solutions
Sonic Gun to Smart Devices: Your Devices Lose Control Under Ultrasound/Sound
''Ghost Telephonist' Link Hijack Exploitations in 4G LTE CS Fallback
Intel SGX Remote Attestation is Not Sufficient
rVMI: A New Paradigm for Full System Analysis
Advanced Pre-Breach Planning: Utilizing a Purple Team to Measure Effectiveness vs. Maturity
The Future of ApplePwn - How to Save Your Money
The Shadow Brokers - Cyber Fear Game-Changers
Protecting Visual Assets: Digital Image Counter-Forensics
Protecting Pentests: Recommendations for Performing More Secure Tests
Evilsploit - A Universal Hardware Hacking Toolkit
Comparing Security Curricula and Accreditations to Industry Needs
Wire Me Through Machine Learning
Orange is the New Purple
Fractured Backbone: Breaking Modern OS Defenses with Firmware Attacks
The Art of Securing 100 Products
Fighting the Previous War (aka: Attacking and Defending in the Era of the Cloud)
The Legal Landscape for a Cybersecurity Professional Seeking to Safeguard Sensitive Client Data
Go Nuclear: Breaking Radiation Monitoring Devices
Lessons Learned in Influencing Security Stakeholders Inside and Outside Your Organization
AVPASS: Leaking and Bypassing Antivirus Detection Model Automatically
Quantifying Risk in Consumer Software at Scale - Consumer Reports' Digital Standard
Are Cyber-Attacks on the Power Grid Limited to Nation-State Actors?
2017 USA BHB 108
Automated Detection of Vulnerabilities in Black-Box Routers (and Other Network Devices)
Evil Bubbles or How to Deliver Attack Payload via the Physics of the Process
Firmware is the New Black - Analyzing Past Three Years of BIOS/UEFI Security Vulnerabilities
Free-Fall: Hacking Tesla from Wireless to CAN Bus