Black Hat USA 2016

120 talks · 2016 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• $Hell on Earth: From Browser to System Compromise 2016
• 1000 Ways to Die in Mobile Oauth 2016
• A Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream Land 2016
• A Lightbulb Worm? 2016
• A Retrospective on the Use of Export Cryptography 2016
• Abusing Bleeding Edge Web Standards for Appsec Glory 2016
• Access Keys Will Kill You Before You Kill the Password 2016
• Account Jumping Post Infection Persistency & Lateral Movement in AWS 2016
• Adaptive Kernel Live Patching: An Open Collaborative Effort... 2016
• Advanced CAN Injection Techniques for Vehicle Networks 2016
• AirBnBeware: Short Term Rentals Long Term Pwnage 2016
• AMSI: How Windows 10 Plans to Stop Script-Based Attacks and How Well It Does It 2016
• An AI Approach to Malware Similarity Analysis: Mapping the Malware Genome With a Deep Neural Network 2016
• An Inconvenient Trust: User Attitudes Toward Security and Usability Tradeoffs... 2016
• An Insider's Guide to Cyber-Insurance and Security Guarantees 2016
• Analysis of the Attack Surface of Windows 10 Virtualization-Based Security 2016
• Applied Machine Learning for Data Exfil and Other Fun Topics 2016
• Attacking SDN Infrastructure: Are We Ready for the Next-Gen Networking? 2016
• Augmenting Static Analysis Using Pintool: Ablation 2016
• AVLeak: Fingerprinting Antivirus Emulators for Advanced Malware Evasion 2016
• Bad for Enterprise: Attacking BYOD Enterprise Mobile Security Solutions 2016
• BadTunnel: How Do I Get Big Brother Power? 2016
• BadWPAD 2016
• Behind the Scenes of iOS Security 2016
• Beyond the Mcse: Active Directory for the Security Professional 2016
• Blunting the Phisher's Spear: A Risk-Based Approach... 2016
• Breaking FIDO: Are Exploits in There? 2016
• Breaking Hardware-Enforced Security With Hypervisors 2016
• Breaking Kernel Address Space Layout Randomization (KASLR) With Intel TSX 2016
• Breaking Payment Points of Interaction (POI) 2016
• Brute-Forcing Lockdown Harddrive Pin Codes 2016
• Building a Product Security Incident Response Team: Learnings From the Hivemind 2016
• Building Trust & Enabling Innovation for Voice Enabled IoT 2016
• Call Me: Gathering Threat Intelligence on Telephony Scams to Detect Fraud 2016
• Can You Trust Me Now? An Exploration Into the Mobile Threat Landscape 2016
• Canspy: A Platform for Auditing Can Devices 2016
• Capturing 0Day Exploits With Perfectly Placed Hardware Traps 2016
• Certificate Bypass: Hiding and Executing Malware from a Digitally Signed Executable 2016
• Crippling HTTPs With Unholy PAC 2016
• Crumbling the Supercookie and Other Ways the FCC Protects Your Internet Traffic 2016
• Cunning With CNG: Soliciting Secrets From Schannel 2016
• Cyber War in Perspective: Analysis From the Crisis in Ukraine 2016
• Dangerous Hare: Hanging Attribute References Hazards Due to Vendor Customization 2016
• Dark Side of the DNS Force 2016
• Defense at Hyperscale: Technologies and Policies for a Defensible Cyberspace 2016
• Defense At Hyperscale: Technologies and Policies for a Defensible Cyberspace 2016
• Demystifying the Secure Enclave Processor 2016
• Design Approaches for Security Automation 2016
• Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf 2016
• Does Dropping USB Drives in Parking Lots and Other Places Really Work? 2016
• DPTrace: Dual Purpose Trace for Exploitability Analysis of Program Crashes 2016
• Drone Attacks on Industrial Wireless: A New Front in Cyber Security 2016
• Dungeons Dragons and Security 2016
• Exploiting Curiosity and Context: How to Make People Click on a Dangerous Link... 2016
• Gattacking Bluetooth Smart Devices - Introducing a New BLE Proxy Tool 2016
• GreatFET: Making GoodFET Great Again 2016
• Hacking Next-Gen ATMs: From Capture to Cashout 2016
• Hackproofing Oracle Ebusiness Suite 2016
• Hardening AWS Environments and Automating Incident Response for AWS Compromises 2016
• HEIST: HTTP Encrypted Information can be Stolen Through TCP-Windows 2016
• Horse Pill: A New Type of Linux Rootkit 2016
• HTTP Cookie Hijacking in the Wild: Security and Privacy Implications 2016
• HTTP/2 & Quic - Teaching Good Protocols to Do Bad Things 2016
• I Came to Drop Bombs: Auditing the Compression Algorithm Weapon Cache 2016
• Into the Core: In-Depth Exploration of Windows 10 IoT Core 2016
• Intra-Process Memory Protection for Applications on ARM and X86: Leveraging the ELF ABI 2016
• Investigating DDOS - Architecture Actors and Attribution 2016
• Iran's Soft-War for Internet Dominance 2016
• Keynote: The Hidden Architecture of our Time: Why This Internet Worked, How We Could Lose It... 2016
• Keystone Engine: Next Generation Assembler Framework 2016
• Language Properties of Phone Scammers: Cyberdefense At the Level of the Human 2016
• Measuring Adversary Costs to Exploit Commercial Software... 2016
• Memory Forensics Using Virtual Machine Introspection for Cloud Computing 2016
• Next-Generation of Exploit Kit Detection By Building Simulated Obfuscators 2016
• Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS 2016
• O-Checker: Detection of Malicious Documents Through Deviation From File Format Specifications 2016
• OSS Security Maturity: Time to Put on Your Big Boy Pants! 2016
• Ouroboros: Tearing Xen Hypervisor With the Snake 2016
• Over the Edge: Silently Owning Windows 10's Secure Browser 2016
• Panel: Removing Roadblocks to Diversity 2016
• Pangu 9 Internals 2016
• Pay No Attention to That Hacker Behind the Curtain: A Look Inside the Black Hat Network 2016
• Pindemonium: A DBI-Based Generic Unpacker for Windows Executable 2016
• PLC-Blaster: A Worm Living Solely in the PLC 2016
• Pwnie Awards 2016 2016
• Pwning Your Java Messaging With Deserialization Vulnerabilities 2016
• Recover a RSA Private Key From a TLS Session With Perfect Forward Secrecy 2016
• Samsung Pay: Tokenized Numbers Flaws and Issues 2016
• Secure Penetration Testing Operations: Demonstrated Weaknesses in Learning Material and Tools 2016
• Security Through Design - Making Security Better By Designing for People 2016
• SGX Secure Enclaves in Practice: Security and Crypto Review 2016
• Side-Channel Attacks on Everyday Applications 2016
• Subverting Apple Graphics: Practical Approaches to Remotely Gaining Root 2016
• TCP Injection Attacks in the Wild - a Large Scale Study 2016
• The Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android 2016
• The Art of Reverse Engineering Flash Exploits 2016
• The Beast Within - Evading Dynamic Malware Analysis Using Microsoft COM 2016
• The Linux Kernel Hidden Inside Windows 10 2016
• The Remote Malicious Butler Did It! 2016
• The Risk From Power Lines: How to Sniff the G3 and Prime Data and Detect the Interfere Attack 2016
• The Tao of Hardware the Te of Implants 2016
• The Year in Flash 2016
• Timing Attacks Have Never Been So Practical: Advanced Cross-Site Search Attacks 2016
• Towards a Holistic Approach in Building Intelligence to Fight Crimeware 2016
• Understanding HL7 2.X Standards, Pen Testing, and Defending HL7 2.X Messages 2016
• Unleash the Infection Monkey: A Modern Alternative to Pen-Tests 2016
• Using An Expanded Cyber Kill Chain Model to Increase Attack Resiliency 2016
• Using EMET to Disable EMET 2016
• Using Undocumented CPU Behavior to See Into Kernel Mode and Break KASLR in the Process 2016
• Viral Video - Exploiting SSRF in Video Converters 2016
• VoIP Wars: the Phreakers Awaken 2016
• Watching Commodity Malware Get Sold to a Targeted Actor 2016
• Weaponizing Data Science for Social Engineering: Automated E2E Spear Phishing on Twitter 2016
• Web Application Firewalls: Analysis of Detection Logic 2016
• What's the DFIRence for ICS? 2016
• When Governments Attack: State Sponsored Malware Attacks Against Activists Lawyers and Journalists 2016
• When the Cops Come A-Knocking: Handling Technical Assistance Demands from Law Enforcement 2016
• Windows 10 Mitigation Improvements 2016
• Windows 10 Segment Heap Internals 2016
• Xenpwn: Breaking Paravirtualized Devices 2016