Black Hat USA 2015

113 talks · 2015 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Abusing Silent Mitigations - Understanding Weaknesses Within Internet Explorer 2015
• Abusing Windows Management Instrumentation (WMI) 2015
• Abusing XSLT For Practical Attacks 2015
• Advanced IC Reverse Engineering Techniques: In Depth Analysis Of A Modern Smart Card 2015
• Adventures In Femtoland: 350 Yuan For Invaluable Fun 2015
• Ah! Universal Android Rooting Is Back 2015
• Android Security State Of The Union 2015
• API Deobfuscator: Resolving Obfuscated API Functions In Modern Packers 2015
• Assessing And Exploiting BigNum Vulnerabilities 2015
• Attacking ECMAScript Engines With Redefinition 2015
• Attacking Hypervisors Using Firmware And Hardware 2015
• Automated Human Vulnerability Scanning With AVA 2015
• Back Doors And Front Doors Breaking The Unbreakable System 2015
• Battle Of The SKM And IUM: How Windows 10 Rewrites OS Architecture 2015
• Behind The Mask: The Agenda, Tricks, And Tactics Of The Federal Trade Commission... 2015
• BGP Stream 2015
• Big Game Hunting: The Peculiarities of Nation-State Malware Research 2015
• Breaking Access Controls With BLEKey 2015
• Breaking Honeypots For Fun And Profit 2015
• Breaking HTTPS With BGP Hijacking 2015
• Breaking Payloads With Runtime Code Stripping And Image Freezing 2015
• Bring Back the Honeypots 2015
• Bringing A Cannon To A Knife Fight 2015
• Broadcasting Your Attack: Security Testing DAB Radio In Cars 2015
• Bypass Control Flow Guard Comprehensively 2015
• Bypass Surgery Abusing Content Delivery Networks With... 2015
• Certifi-gate: Front-Door Access To Pwning Millions Of Androids 2015
• Cloning 3G/4G SIM Cards With A PC And An Oscilloscope: Lessons Learned In Physical Security 2015
• Commercial Mobile Spyware - Detecting The Undetectable 2015
• CrackLord: Maximizing Password Cracking Boxes 2015
• Crash & Pay: How To Own And Clone Contactless Payment Devices 2015
• Dance Like Nobodys Watching Encrypt Like Everyone Is: A Peek Inside the Black Hat Network 2015
• Data-Driven Threat Intelligence: Metrics On Indicator Dissemination And Sharing 2015
• Deep Learning On Disassembly 2015
• Defeating Machine Learning: What Your Security Vendor Is Not Telling You 2015
• Defeating Pass-the-Hash: Separation Of Powers 2015
• Distributing The Reconstruction Of High-Level Intermediate Representation... 2015
• Dom Flow - Untangling The DOM For More Easy-Juicy Bugs 2015
• Emanate Like A Boss: Generalized Covert Data Exfiltration With Funtenna 2015
• Exploiting Out-of-Order Execution For Covert Cross-VM Communication 2015
• Exploiting the DRAM Rowhammer Bug to Gain Kernel Privileges 2015
• Exploiting XXE Vulnerabilities In File Parsing Functionality 2015
• Faux Disk Encryption: Realities Of Secure Storage On Mobile Devices 2015
• FileCry - The New Age Of XXE 2015
• Fingerprints On Mobile Devices: Abusing And Leaking 2015
• Forging The USB Armory, An Open Source Secure Flash-Drive-Sized Computer 2015
• From False Positives To Actionable Analysis 2015
• GameOver Zeus: Badguys And Backends 2015
• Graphic Content Ahead: Towards Automated Scalable Analysis Of Graphical Images Embedded In Malware 2015
• Harnessing Intelligence From Malware Repositories 2015
• HI THIS IS URGENT PLZ FIX ASAP: Critical Vulnerabilities And Bug Bounty Programs 2015
• Hidden Risks Of Biometric Identifiers And How To Avoid Them 2015
• How To Hack Government: Technologists As Policy Makers 2015
• How To Implement IT Security After A Cyber Meltdown 2015
• How Vulnerable Are We To Scams? 2015
• Information Access And Information Sharing: Where We Are And Where We Are Going 2015
• Internet Plumbing for Security Professionals: The State Of BGP Security 2015
• Internet-Scale File Analysis 2015
• Is The NSA Still Listening To Your Phone Calls? A Surveillance Debate 2015
• Mobile Point Of Scam: Attacking The Square Reader 2015
• Most Ransomware Isn't As Complex As You Might Think 2015
• My Bro The ELK: Obtaining Context From Security Events 2015
• Optimized Fuzzing IOKit In iOS 2015
• Panel: How The Wassenaar Arrangement's Export Control Of "Intrusion Software" Affects Industry 2015
• Pen Testing A City 2015
• PWNIE Awards 2015
• Red Vs. Blue: Modern Active Directory Attacks, Detection, And Protection 2015
• Remote Exploitation Of An Unaltered Passenger Vehicle 2015
• Remote Physical Damage 101 - Bread And Butter Attacks 2015
• Repurposing OnionDuke: A Single Case Study Around Reusing Nation State Malware 2015
• Return To Where? You Can't Exploit What You Can't Find 2015
• Review And Exploit Neglected Attack Surfaces In iOS 8 2015
• Rocking The Pocket Book: Hacking Chemical Plant For Competition And Extortion 2015
• ROPInjector: Using Return Oriented Programming For Polymorphism And Antivirus Evasion 2015
• Securing Your Big Data Environment 2015
• Server-Side Template Injection: RCE For The Modern Web App 2015
• SMBv2: Sharing More Than Just Your Files 2015
• Social Engineering The Windows Kernel: Finding And Exploiting Token Handling Vulnerabilities 2015
• Spread Spectrum Satcom Hacking: Attacking The Globalstar Simplex Data Service 2015
• Stagefright: Scary Code in the Heart of Android 2015
• Staying Persistent In Software Defined Networks 2015
• Stranger Danger! What Is The Risk From 3rd Party Libraries? 2015
• Subverting Satellite Receivers For Botnet And Profit 2015
• Switches Get Stitches 2015
• Take A Hacker To Work Day - How Federal Prosecutors Use The CFAA 2015
• Taking Event Correlation With You 2015
• Targeted Takedowns: Minimizing Collateral Damage Using Passive DNS 2015
• Taxonomic Modeling Of Security Threats In Software Defined Networking 2015
• The Applications Of Deep Learning On Traffic Identification 2015
• The Battle For Free Speech On The Internet 2015
• The Kali Linux Dojo Workshop #1: Rolling Your Own - Generating Custom Kali Linux 2.0 ISOs 2015
• The Kali Linux Dojo Workshop #2: Kali USB Setups With Persistent Stores And LUKS Nuke Support 2015
• The Lifecycle of a Revolution (Keynote) 2015
• The Little Pump Gauge That Could: Attacks Against Gas Pump Monitoring Systems 2015
• The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation 2015
• The Node.js Highway: Attacks Are At Full Throttle 2015
• The NSA Playset: A Year Of Toys And Tools 2015
• The Tactical Application Security Program: Getting Stuff Done 2015
• These Are Not Your Grand Daddy's CPU Performance Counters - CPU Hardware Performance Counters... 2015
• THIS IS DeepERENT: Tracking App Behaviors With (Nothing Changed) Phone... 2015
• ThunderStrike 2: Sith Strike 2015
• TrustKit: Code Injection on iOS 8 for the Greater Good 2015
• Understanding And Managing Entropy Usage 2015
• Understanding The Attack Surface And Attack Resilience Of Project Spartan's New EdgeHTML... 2015
• Unicorn: Next Generation CPU Emulator Framework 2015
• Using Static Binary Analysis To Find Vulnerabilities And Backdoors In Firmware 2015
• Web Timing Attacks Made Practical 2015
• When IoT Attacks: Hacking A Linux-Powered Rifle 2015
• Why Security Data Science Matters And How It's Different 2015
• Winning The Online Banking War 2015
• Writing Bad @$$ Malware For OS X 2015
• WSUSpect - Compromising The Windows Enterprise Via Windows Update 2015
• ZigBee Exploited The Good, The Bad, And The Ugly 2015