Black Hat USA 2019

113 talks · 2019 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• 0-days & Mitigations: Roadways to Exploit and Secure Connected BMW Cars 2019
• A Compendium of Container Escapes 2019
• A Decade After Bleichenbacher '06, RSA Signature Forgery Still Works 2019
• Adventures in the Underland: The CQForensic Toolkit as a Unique Weapon Against Hackers 2019
• All the 4G Modules Could be Hacked 2019
• All Your Apple are Belong to Us: Unique Identification and Cross-Device Tracking of Apple Devices 2019
• API-Induced SSRF: How Apple Pay Scattered Vulnerabilities Across the Web 2019
• Arm IDA and Cross Check: Reversing the Boeing 787's Core Network 2019
• Attacking and Defending the Microsoft Cloud (Office 365 & Azure AD) 2019
• Attacking Electric Motors for Fun and Profit 2019
• Attacking iPhone XS Max 2019
• Automation Techniques in C++ Reverse Engineering 2019
• Backdooring Hardware Devices by Injecting Malicious Payloads on Microcontrollers 2019
• Battle of Windows Service: A Silver Bullet to Discover File Privilege Escalation Bugs Automatically 2019
• Behind the Scenes of Intel Security and Manageability Engine 2019
• Behind the scenes of iOS and Mac Security 2019
• Behind the Scenes: The Industry of Social Media Manipulation Driven by Malware 2019
• Biometric Authentication Under Threat: Liveness Detection Hacking 2019
• Bounty Operations: Best Practices and Common Pitfalls to Avoid in the First 6-12 Months 2019
• Breaking Encrypted Databases: Generic Attacks on Range Queries 2019
• Breaking Encrypted Databases: Generic Attacks on Range Queries 2019
• Breaking Samsung's ARM TrustZone 2019
• Breaking Through Another Side: Bypassing Firmware Security Boundaries from Embedded Controller 2019
• Bypassing the Maginot Line: Remotely Exploit the Hardware Decoder on Smartphone 2019
• Chip.Fail - Glitching the Silicon of the Connected World 2019
• ClickOnce and You're in - When Appref-ms Abuse is Operating as Intended 2019
• Come Join the CAFSA - Continuous Automated Firmware Security Analysis 2019
• Command Injection in F5 iRules 2019
• Controlled Chaos: The Inevitable Marriage of DevOps & Security 2019
• Critical Zero Days Remotely Compromise the Most Popular Real-Time OS 2019
• Cyber Insurance 101 for CISO’s 2019
• Cybersecurity Risk Assessment for Safety-Critical Systems 2019
• Death to the IOC: What's Next in Threat Intelligence 2019
• Debug for Bug: Crack and Hack Apple Core by Itself 2019
• Defense Against Rapidly Morphing DDOS 2019
• Denial of Service with a Fistful of Packets: Exploiting Algorithmic Complexity Vulnerabilities 2019
• Detecting Deep Fakes with Mice 2019
• Detecting Malicious Files with YARA Rules as They Traverse the Network 2019
• DevSecOps : What, Why and How 2019
• Dragonblood: Attacking the Dragonfly Handshake of WPA3 2019
• Everybody be Cool, This is a Robbery! 2019
• Exploiting Qualcomm WLAN and Modem Over The Air 2019
• Exploiting the Hyper-V IDE Emulator to Escape the Virtual Machine 2019
• Exploring the New World : Remote Exploitation of SQLite and Curl 2019
• Fantastic Red-Team Attacks and How to Find Them 2019
• Finding a Needle in an Encrypted Haystack 2019
• Finding Our Path: How We're Trying to Improve Active Directory Security 2019
• Firmware Cartography: Charting the Course for Modern Server Compromise 2019
• Flying a False Flag: Advanced C2, Trust Conflicts, and Domain Takeover 2019
• GDPArrrrr: Using Privacy Laws to Steal Identities 2019
• Ghidra - Journey from Classified NSA Tool to Open Source 2019
• Going Beyond Coverage-Guided Fuzzing with Structured Fuzzing 2019
• Hacking Ten Million Useful Idiots: Online Propaganda as a Socio-Technical Security Project 2019
• Hacking Your Non-Compete 2019
• He Said, She Said – Poisoned RDP Offense and Defense 2019
• HostSplit: Exploitable Antipatterns in Unicode Normalization 2019
• How Do Cyber Insurers View The World? 2019
• How to Detect that Your Domains are Being Abused for Phishing by Using DNS 2019
• HTTP Desync Attacks: Smashing into the Cell Next Door 2019
• Hunting for Bugs, Catching Dragons 2019
• I'm Unique, Just Like You: Human Side-Channels and Their Implications for Security and Privacy 2019
• Infighting Among Russian Security Services in the Cyber Sphere 2019
• Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs 2019
• Inside the Apple T2 2019
• Integration of Cyber Insurance Into A Risk Management Program 2019
• Internet-Scale Analysis of AWS Cognito Security 2019
• Legal GNSS Spoofing and its Effects on Autonomous Vehicles 2019
• Lessons and Lulz: The 5th Annual Black Hat USA NOC Report 2019
• Lessons From Two Years of Crypto Audits 2019
• Look, No Hands! -- The Remote, Interaction-less Attack Surface of the iPhone 2019
• Making Big Things Better The Dead Cow Way 2019
• Managing for Success: Maintaining a Healthy Bug Bounty Program Long Term 2019
• Messaging Layer Security: Towards a New Era of Secure Group Messaging 2019
• MINimum Failure - Stealing Bitcoins with Electromagnetic Fault Injection 2019
• MITRE ATT&CK: The Play at Home Edition 2019
• Mobile Interconnect Threats: How Next-Gen Products May be Already Outdated 2019
• Monsters in the Middleboxes: Building Tools for Detecting HTTPS Interception 2019
• Moving from Hacking IoT Gadgets to Breaking into One of Europe's Highest Hotel Suites 2019
• New Vulnerabilities in 5G Networks 2019
• On Trust: Stories from the Front Lines 2019
• Operational Templates for State-Level Attack and Collective Defense of Countries 2019
• Paging All Windows Geeks – Finding Evil in Windows 10 Compressed Memory 2019
• PeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary 2019
• PicoDMA: DMA Attacks at Your Fingertips 2019
• Playing Offense and Defense with Deepfakes 2019
• Practical Approach to Automate the Discovery & Eradication of Open-Source Software Vulnerabilities 2019
• Preventing Authentication Bypass: A Tale of Two Researchers 2019
• Process Injection Techniques - Gotta Catch Them All 2019
• Project Zero: Five Years of 'Make 0Day Hard' 2019
• Responding to a Cyber Attack with Missiles 2019
• Reverse Engineering WhatsApp Encryption for Chat Manipulation and More 2019
• Rogue7: Rogue Engineering-Station Attacks on S7 Simatic PLCs 2019
• Rough and Ready: Frameworks to Measure Persistent Engagement and Deterrence 2019
• Securing Apps in the Open-By-Default Cloud 2019
• Securing the System: A Deep Dive into Reversing Android Pre-Installed Apps 2019
• Selling 0-Days to Governments and Offensive Security Companies 2019
• Selling 0-Days to Governments and Offensive Security Companies 2019
• Sensor and Process Fingerprinting in Industrial Control Systems 2019
• Shifting Knowledge Left: Keeping up with Modern Application Security 2019
• SSO Wars: The Token Menace 2019
• Testing Your Organization's Social Media Awareness 2019
• The Discovery of a Government Malware and an Unexpected Spy Scandal 2019
• The Enemy Within: Modern Supply Chain Attacks 2019
• The Future of ATO 2019
• The Future of Securing Intelligent Electronic Devices Using the IEC 62351-7 Standard for Monitoring 2019
• The Path Less Traveled: Abusing Kubernetes Defaults 2019
• Towards Discovering Remote Code Execution Vulnerabilities in Apple FaceTime 2019
• Transparency in the Software Supply Chain: Making SBOM a Reality 2019
• WebAuthn 101 - Demystifying WebAuthn 2019
• Woke Hiring Won't Save Us: An Actionable Approach to Diversity Hiring and Retention 2019
• Women in Security: Building a Female InfoSec Community in Korea, Japan, and Taiwan 2019
• Worm Charming: Harvesting Malware Lures for Fun and Profit 2019
• Zombie Ant Farming: Practical Tips for Playing Hide and Seek with Linux EDRs 2019