Disrupting the Killchain
Explore cybersecurity strategies to disrupt attack killchains, covering reconnaissance, exploitation, and command & control phases with practical defensive measures and tools.
Abusing Webhooks for Command and Control
Explore techniques for exploiting webhooks as command and control channels in cybersecurity. Learn about potential vulnerabilities and defensive strategies.
Finding Foes and Yourself with Latency Trilateration
Discover how latency trilateration can revolutionize cyber threat intelligence by geolocating adversary servers through network signal timing measurements and physical principles.
Discord as Malware Infrastructure - Emerging Threats and Attack Trends
Explore how cybercriminals leverage Discord as malware infrastructure and discover emerging threats targeting hackers, with insights into Turkish threat actors' tactics.
Simulating Attacks Against Hydroelectric Power Plants Using ICS Firing Range
Dive into a comprehensive simulation of cyberattacks on hydroelectric facilities, exploring both offensive tactics and defensive strategies through a custom-built ICS firing range environment.
MFT: Using NFTs as Attack Vectors for Command and Control
Explore how NFTs can be weaponized as attack vectors for C2 commands, featuring the mFT tool for creating malicious payloads and understanding blockchain-backed threats in cybersecurity.
Hiding C2 Communications in Plain Sight Using Windows Memory Page Permissions
Discover advanced techniques for hiding C2 communications by exploiting Windows memory page permissions, with practical approaches to building modular and stealthy command-and-control systems.
NTLM Relay Attacks - An OPSEC-Conscious Approach to Port 445 Takeover
Discover a stealthy technique for NTLM relay attacks by hijacking port 445/tcp, featuring reverse engineering insights and automation tools for enhanced SMB-based operations with minimal detection risk.
Identifying North Korean State-Sponsored Threat Actors Through Malware Analysis and OSINT
Uncover the journey of identifying a North Korean state-sponsored threat actor through malware analysis, OSINT investigation, and interviews with intelligence agencies and security forces.
Malware Design: Abusing Legacy Microsoft Transports and Session Architecture
Explore advanced malware design techniques and covert communication frameworks, focusing on Windows architecture exploitation and maintaining persistent access while evading detection systems.
Behind Enemy Lines: Engaging and Disrupting Ransomware Web Panels
Dive into advanced strategies for infiltrating and disrupting ransomware operations by targeting their web panels, APIs, and command centers while gathering vital intelligence on threat actors.
Living off the Cloud Attacks - You Should Know About Them
Explore cloud-based attacks, their detection challenges, and mitigation strategies. Gain insights into malware communication via API through a live demo and learn effective prevention techniques.
TTPs of Attacks on OSS in Python - Trusty Package Security
Explore tactics and techniques of supply-chain attacks on Python open-source software, including starjacking, installation, delivery, and exfiltration. Learn defensive strategies against these threats.
Black Hat USA 2025
Black Hat USA 2025
Black Hat Asia 2025
Black Hat Asia 2025