BLEEDINGBIT - Your APs Belong to Us
Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.
Ghost Telephonist Link Hijack Exploitations in 4G LTE CS Fallback
Uncover a critical 4G LTE vulnerability allowing attackers to hijack calls and SMS. Learn about the 'Ghost Telephonist' attack and its implications for mobile network security.
IoTCandyJar - Towards an Intelligent-Interaction Honeypot for IoT Devices
Explore innovative honeypot adaptation for IoT security, addressing unique challenges and proposing intelligent interaction solutions to enhance protection of networked embedded devices.
Dragonblood - Attacking the Dragonfly Handshake of WPA3
Uncover vulnerabilities in WPA3's Dragonfly handshake, including side-channel attacks and password partitioning techniques. Learn about design flaws and implementation issues affecting Wi-Fi security protocols.
Detecting Malicious Files with YARA Rules as They Traverse the Network
Learn to detect malicious files using YARA rules and Zeek IDS for early-stage attack identification, enhancing network security with improved performance and targeted scanning techniques.
Zombie POODLE, GOLDENDOODLE, and How TLSv1.3 Can Save Us All
Explore advanced CBC padding oracle attacks, including a resurrected POODLE vulnerability and the faster GOLDENDOODLE attack. Learn how TLSv1.3 addresses these security issues.
WireGuard - Next Generation Secure Network Tunnel
Explore WireGuard, a modern VPN protocol offering improved security, performance, and simplicity compared to traditional options like IPsec and OpenVPN. Learn about its innovative design and benefits.
A Deep Dive into macOS MDM - and How it Can Be Compromised
Explore macOS MDM vulnerabilities, including bootstrapping stages, IPC flows, and network security. Includes live demo of potential nation-state actor exploit on new Mac devices.
Tales from the NOC - Going Public in Asia
Insider look at designing and securing Black Hat Asia's network infrastructure. Explore behind-the-scenes challenges, experiences, and evolving designs from the Network Operations Center team.
Wi-Fi Direct to Hell - Attacking Wi-Fi Direct Protocol Implementations
Explore Wi-Fi Direct vulnerabilities in Android, HP printers, and Samsung Smart TVs. Learn about protocol architecture, discovery, connection processes, and frame formats. Includes PoC and fingerprinting tool release.
Routopsy - Modern Routing Protocol Vulnerability Analysis and Exploitation
Explore vulnerabilities in dynamic routing and redundancy protocols, learn about common misconfigurations, and discover techniques for network attacks and discovery in this comprehensive analysis.
Industrial Protocol Gateways Under Analysis
Explore security vulnerabilities in industrial protocol gateways, examining cross-vendor issues and potential impacts on industrial facilities in the context of Industry 4.0 interconnectivity.
Virtually Private Networks
Explore the security implications of remote access solutions and VPNs for enterprise mobile workforces, examining potential vulnerabilities and challenges.
BlueMaster - Bypassing and Fixing Bluetooth-Based Proximity Authentication
Explore security vulnerabilities in Bluetooth proximity authentication, including new attacks on Android Smart Lock and Windows Dynamic Lock, and learn potential fixes for these issues.
Lessons and Lulz - The 5th Annual Black Hat USA NOC Report
Insights and humor from Black Hat's Network Operations Center, revealing security professionals' behavior on open WiFi and discussing network setup, security, and improvements.
Misuse of DNS - The Second Most Used Protocol
Explore DNS vulnerabilities and attacks, examining the protocol's critical role in internet traffic and its ongoing security challenges as IPv6 adoption grows.
Detecting Fake 4G Base Stations in Real Time
Learn to detect and understand 4G/LTE IMSI-catchers, explore their capabilities, and discover software solutions for identifying fake base stations. Gain insights into cell network security improvements.
EtherOops - Exploring Practical Methods to Exploit Ethernet Packet-in-Packet Attacks
Explore practical methods to exploit Ethernet packet-in-packet attacks, bypassing firewalls and NAT solutions. Learn how attackers can establish man-in-the-middle positions to eavesdrop on corporate communications.
Indicators of Compromise - From Malware Analysis to Eradication
Learn to identify, analyze, and eradicate unknown malware in corporate networks using freely available tools. Gain practical skills for effective threat detection and response.
Not Only Frogs Can Hop
Explore novel VLAN hopping methods using SNMP, including live demos and the release of Frogger 2 tool for automated and improved network security testing.
Barbarians at the Gateway - An Examination of the Attacker’s Tool Box
Explore DDoS attack tools, methods, and motivations. Gain insights into attacker patterns and progression for better protection against cyber threats.