Black Hat USA 2019
115 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Ghidra - Journey from Classified NSA Tool to Open Source
DevSecOps : What, Why and How
Black Hat USA 2019 Keynote: Every Security Team is a Software Team Now by Dino Dai Zovi
Behind the scenes of iOS and Mac Security
Reverse Engineering WhatsApp Encryption for Chat Manipulation and More
Selling 0-Days to Governments and Offensive Security Companies
Process Injection Techniques - Gotta Catch Them All
Attacking and Defending the Microsoft Cloud (Office 365 & Azure AD)
Detecting Malicious Files with YARA Rules as They Traverse the Network
MITRE ATT&CK: The Play at Home Edition
WebAuthn 101 - Demystifying WebAuthn
GDPArrrrr: Using Privacy Laws to Steal Identities
Inside the Apple T2
The Path Less Traveled: Abusing Kubernetes Defaults
Death to the IOC: What's Next in Threat Intelligence
Denial of Service with a Fistful of Packets: Exploiting Algorithmic Complexity Vulnerabilities
New Vulnerabilities in 5G Networks
Breaking Samsung's ARM TrustZone
Securing the System: A Deep Dive into Reversing Android Pre-Installed Apps
Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs
Biometric Authentication Under Threat: Liveness Detection Hacking
Practical Approach to Automate the Discovery & Eradication of Open-Source Software Vulnerabilities
A Compendium of Container Escapes
The Enemy Within: Modern Supply Chain Attacks
Flying a False Flag: Advanced C2, Trust Conflicts, and Domain Takeover
Backdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers
Going Beyond Coverage-Guided Fuzzing with Structured Fuzzing
Automation Techniques in C++ Reverse Engineering
Woke Hiring Won't Save Us: An Actionable Approach to Diversity Hiring and Retention
Command Injection in F5 iRules
Attacking iPhone XS Max
Rogue7: Rogue Engineering-Station Attacks on S7 Simatic PLCs
Exploiting the Hyper-V IDE Emulator to Escape the Virtual Machine
Shifting Knowledge Left: Keeping up with Modern Application Security
Behind the Scenes of Intel Security and Manageability Engine
Breaking Encrypted Databases: Generic Attacks on Range Queries
Fantastic Red-Team Attacks and How to Find Them
Infighting Among Russian Security Services in the Cyber Sphere
The Discovery of a Government Malware and an Unexpected Spy Scandal
Dragonblood: Attacking the Dragonfly Handshake of WPA3
The Most Secure Browser? Pwning Chrome from 2016 to 2019
Look, No Hands! -- The Remote, Interaction-less Attack Surface of the iPhone
Messaging Layer Security: Towards a New Era of Secure Group Messaging
Preventing Authentication Bypass: A Tale of Two Researchers
Cyber Insurance 101 for CISO’s
PicoDMA: DMA Attacks at Your Fingertips
Project Zero: Five Years of 'Make 0Day Hard'
Hacking Ten Million Useful Idiots: Online Propaganda as a Socio-Technical Security Project
Chip.Fail - Glitching the Silicon of the Connected World
Everybody be Cool, This is a Robbery!
All the 4G Modules Could be Hacked
Exploiting Qualcomm WLAN and Modem Over The Air
0-days & Mitigations: Roadways to Exploit and Secure Connected BMW Cars
HTTP Desync Attacks: Smashing into the Cell Next Door
Adventures in the Underland: The CQForensic Toolkit as a Unique Weapon Against Hackers
Breaking Through Another Side: Bypassing Firmware Security Boundaries from Embedded Controller
How Do Cyber Insurers View The World?
Selling 0-Days to Governments and Offensive Security Companies
Finding Our Path: How We're Trying to Improve Active Directory Security
How to Detect that Your Domains are Being Abused for Phishing by Using DNS
Moving from Hacking IoT Gadgets to Breaking into One of Europe's Highest Hotel Suites
HostSplit: Exploitable Antipatterns in Unicode Normalization
Responding to a Cyber Attack with Missiles
Towards Discovering Remote Code Execution Vulnerabilities in Apple FaceTime
Controlled Chaos: The Inevitable Marriage of DevOps & Security
Behind the Scenes: The Industry of Social Media Manipulation Driven by Malware
Arm IDA and Cross Check: Reversing the Boeing 787's Core Network
Paging All Windows Geeks – Finding Evil in Windows 10 Compressed Memory
API-Induced SSRF: How Apple Pay Scattered Vulnerabilities Across the Web
Lessons From Two Years of Crypto Audits
MINimum Failure - Stealing Bitcoins with Electromagnetic Fault Injection
Women in Security: Building a Female InfoSec Community in Korea, Japan, and Taiwan
Internet-Scale Analysis of AWS Cognito Security
Critical Zero Days Remotely Compromise the Most Popular Real-Time OS
Lessons and Lulz: The 5th Annual Black Hat USA NOC Report
ClickOnce and You're in - When Appref-ms Abuse is Operating as Intended
Monsters in the Middleboxes: Building Tools for Detecting HTTPS Interception
All Your Apple are Belong to Us: Unique Identification and Cross-Device Tracking of Apple Devices
He Said, She Said – Poisoned RDP Offense and Defense
Defense Against Rapidly Morphing DDOS
Exploring the New World : Remote Exploitation of SQLite and Curl
Legal GNSS Spoofing and its Effects on Autonomous Vehicles
Debug for Bug: Crack and Hack Apple Core by Itself
Making Big Things Better The Dead Cow Way
Transparency in the Software Supply Chain: Making SBOM a Reality
Testing Your Organization's Social Media Awareness
A Decade After Bleichenbacher '06, RSA Signature Forgery Still Works
Playing Offense and Defense with Deepfakes
Cybersecurity Risk Assessment for Safety-Critical Systems
Managing for Success: Maintaining a Healthy Bug Bounty Program Long Term
The Future of Securing Intelligent Electronic Devices Using the IEC 62351-7 Standard for Monitoring
Finding a Needle in an Encrypted Haystack
Breaking Encrypted Databases: Generic Attacks on Range Queries
Firmware Cartography: Charting the Course for Modern Server Compromise
Battle of Windows Service: A Silver Bullet to Discover File Privilege Escalation Bugs Automatically
The Future of ATO
Bounty Operations: Best Practices and Common Pitfalls to Avoid in the First 6-12 Months
Hunting for Bugs, Catching Dragons
Attacking Electric Motors for Fun and Profit
On Trust: Stories from the Front Lines