Black Hat USA 2021
90 videos enrolled
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Back in Black Hat: The 7th Annual Black Hat USA NOC Report
Keynote: Hacking the Cybersecurity Puzzle
The Kitten that Charmed Me: The 9 Lives of a Nation State Attacker
Can You Hear Me Now? Remote Eavesdropping Vulnerabilities in Mobile Messaging Applications
HTTP/2: The Sequel is Always Worse
Keynote: Supply Chain Infections and the Future of Contactless Deliveries
The Ripple Effect: Building a Diverse Security Research Team
Locknote: Conclusions and Key Takeaways from Day 1
How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain
The Devil is in the GAN: Defending Deep Generative Models Against Adversarial Attacks
20+ Ways to Bypass Your macOS Privacy Mechanisms
5G IMSI Catchers Mirage5G IMSI Catchers Mirage
A Broken Chain: Discovering OPC UA Attack Surface and Exploiting the Supply Chain
Action Bias and the Two Most Dangerous Words in Cybersecurity
A Hole in the Tube: Uncovering Vulnerabilities in Critical Infrastructure of Healthcare Facilities
Alcatraz: A Practical Hypervisor Sandbox to Prevent Escapes from the KVM/QEMU and KVM-Based MicroVMs
A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms
ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Anatomy of Native IIS Malware
Another Road Leads to the Host: From a Message to VM Escape on Nvidia vGPU
Arm'd and Dangerous
A Survivor-Centric, Trauma-Informed Approach to Stalkerware
Bam the BAM - Electromagnetic Fault Injection & Automotive Systems
Breaking Secure Bootloaders
Breaking the Isolation: Cross-Account AWS Vulnerabilities
Bridging Security Infrastructure Between the Data Center and AWS Lambda
Bypassing Windows Hello for Business and Pleasure
Can You Roll Your Own SIEM?
Certified Pre-Owned: Abusing Active Directory Certificate Services
Cloudy with a Chance of APT: Novel Microsoft 365 Attacks in the Wild
CnCHunter: An MITM-Approach to Identify Live CnC Servers
Come to the Dark Side, We Have Apples: Turning macOS Management Evil
Crashing Your Way to Medium-IL: Exploiting the PDB Parser for Privilege Escalation
DBREACH: Database Reconnaissance and Exfiltration via Adaptive Compression Heuristics
Deepfake Social Engineering: Creating a Framework for Synthetic Media Social Engineering
Defeating a Secure Element with Multiple Laser Fault Injections
Demystify AI Security Products With a Universal Pluggable XAI Translator
Do You Speak My Language? Make Static Analysis Engines Understand Each Other
Disinformation At Scale: Using GPT-3 Maliciously for Information Operations
Diving in to Spooler: Discovering LPE and RCE Vulnerabilities in Windows Printer
Everything has Changed in iOS 14, but Jailbreak is Eternal
Exploiting Windows COM/WinRT ServicesExploiting Windows COM/WinRT Services
Fixing a Memory Forensics Blind Spot: Linux Kernel Tracing
FragAttacks: Breaking Wi-Fi through Fragmentation and Aggregation
Generating YARA Rules by Classifying Malicious Byte Sequences
Government-Mandated Front Doors?: A Global Assessment of Legalized Government Access to Data
Greybox Program Synthesis: A New Approach to Attack Dataflow Obfuscation
Hack Different: Pwning iOS 14 with Generation Z Bug
Hacking a Capsule Hotel - Ghost in the Bedrooms
hAFL1: Our Journey of Fuzzing Hyper-V and Discovering a 0-Day
Exploring & Exploiting Zero-Click Remote Interfaces of Modern Huawei Smartphones
HPE iLO5 Firmware Security - Go Home Cryptoprocessor, You're Drunk!
Breaking Network Segregation Using Esoteric Command & Control Channels
Internal Affairs: Hacking File System Access from the Web
IPvSeeYou: Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation
Legal Pitfalls to Avoid in Security Incidents
Let's Attack Let's Encrypt
MFA-ing the Un-MFA-ble: Protecting Auth Systems' Core Secrets
Mobius Band: Explore Hyper-V Attack Interface through Vulnerabilities Internals
Next-Gen DFIR: Mass Exploits & Supplier Compromise
Over the Air Baseband Exploit: Gaining Remote Code Execution on 5G Smartphones
PCIe Device Attacks: Beyond DMA. Exploiting PCIe Switches, Messages and Errors
President's Cup Cyber Competition: Finding the Best Cyber Talent in the US Government
ProxyLogon is Just the Tip of the Iceberg: A New Attack Surface on Microsoft Exchange Server!
Put in One Bug and Pop Out More: An Effective Way of Bug Hunting in Chrome
Qualcomm WiFi: Infinity War
Securing Open Source Software - End-to-end, At massive scale, Together
Security Analysis of CHERI ISASecurity Analysis of CHERI ISA
Uncovering Planned Obsolescence Practices in Robotics and What This Means for Cybersecurity
Smashing the ML Stack for Fun and Lawsuits
Symbexcel: Bringing the Power of Symbolic Execution to the Fight Against Malicious Excel 4 Macros
The Case for a National Cybersecurity Safety Board
The Dark Age of Memory Corruption Mitigations in the Spectre Era
The Mass Effect: How Opportunistic Workers Drift into Cybercrime
An Offensive Approach to Analyzing Huge and Complex Big Data Infrastructures
Timeless Timing Attacks
Rope: Bypassing Behavioral Detection of Malware with Distributed ROP-Driven Execution
Safeguarding UEFI Ecosystem: Firmware Supply Chain is Hard(coded)
Sleight of ARM: Demystifying Intel Houdini
Applying AI as a Service to Targeted Phishing & Defending Against AI Generated Attacks
Typhoon Mangkhut: One-click Remote Universal Root Formed with Two Vulnerabilities
Whoops, I Accidentally Helped Start the Offensive Intel Branch of a Foreign Intel Service
Wibbly Wobbly, Timey Wimey – What's Really Inside Apple's U1 Chip
Reverse Engineering the M1
With Friends Like eBPF, Who Needs Enemies?
Your Software IS/NOT Vulnerable: CSAF, VEX, and the Future of Advisories
Windows Heap-backed Pool: The Good, the Bad, and the Encoded
Zero - The Funniest Number in Cryptography
Keynote: Secretary Alejandro Mayorkas
ERROR: BadAlloc! - Broken Memory Allocators Led to Millions of Vulnerable IoT & Embedded Devices (2)