Black Hat Asia 2015
2015-03-24..2015-03-27
Singapore, Singapore
[Black Hat Asia 2015, Black Hat Asia 2016, Black Hat Asia 2018, Black Hat Asia 2019, Black Hat Asia 2020, Black Hat Asia 2021, Black Hat Asia 2022, Black Hat Asia 2023]
| title | author | length |
|---|---|---|
| Keynote: Information Technology Systems in a Post-Silcon World | Bernard S. Meyerson | 57m |
Moore’s Law is effectively stalled—gate dielectrics reach five atoms and silicon hits quantum limits—so systems shift to FPGA/GPU acceleration (10–100×… | ||
| Welcome and Introduction to | Jeff Moss | 11m |
Brief history of Black Hat in Singapore and a claim that the conference separates content from sponsors, now drawing attendees from 64 countries including… | ||
| Bar-Mitzva Attack: Breaking SSL with 13-Year Old RC4 Weakness | Itsik Mantin | 49m |
Shows that the old RC4 invariance weakness lets an attacker recover least‑significant bits of TLS plaintext when a weak key occurs with 2^-24 weak-key… | ||
| The Underground Ecosystem of Credit Card Frauds | Abhinav Singh | 54m |
Explains how POS RAM-scrapers identify track one and track two data in memory with regexes and function calls, exfiltrate dumps to C2 servers, then sell them… | ||
| Understanding SCADA's Modbus Protocol | Justin Searle | 01h 52m |
by Justin Searle
Join Justin Searle for a two-hour workshop where he'll take you through the modbus network protocol standard and walk you through hands-on… | ||
| Manna from Heaven: Improving the State of Wireless Rogue AP Attacks | Daniel Cuthbert | 44m |
Toolkit called Mana modifies patched hostapd to emulate broadcast and directed probe responses, harvests per-MAC preferred-network lists, and replays thousands… | ||
| From Zero to Secure in One Minute | Nir Valtman, Moshe Ferber | 54m |
Claims an automated lifecycle that boots prepatched instances, attaches an encrypted data volume and only promotes machines after an automated Nessus scan… | ||
| Hopping on the CAN Bus | Eric Evenchick | 49m |
Open-source toolkit CANard provides a hardware-abstraction Python API (start/stop/send/receive) and scripts that run over SocketCAN, vcan and USB devices like… | ||
| (In)Security of Mobile Banking | Eric Filiol, Paul Irolla | 57m |
OpenDafY produces an Android malware detector (static + ML), PanopTest MITM with injected CA and a mass downloader; those tools reveal that most banking apps… | ||
| Next Level Cheating and Leveling Up Mitigations | Joel St. John, Nicolas Guigo | 48m |
Shows a working proof‑of‑concept dual‑mapped kernel driver that maps game pages into a cheat process so ReadProcessMemory/WriteProcessMemory are unnecessary… | ||
| Client-Side Protection Against DOM-Based XSS Done Right (tm) | Martin Johns, Sebastian Lekies, Ben Stock | 01h 01m |
Analysis finds 17 Chrome XSS Auditor flaws and a bypass toolkit that auto-generates exploits; running those probes against the Alexa Top 10k uncovers about… | ||
| Decentralized Malware on The Blockchain | Christian Karam, Vitaly Kamluk | 49m |
Claim: arbitrary binaries can be stored in transactions and reconstructed and executed by a tiny loader that pulls wallet IDs from a block, concatenates their… | ||
| Forging the USB Armory | Andrea Barisani | 54m |
Open hardware USB stick that is a full Linux computer built around the i.MX53 Cortex-A8 with 512 MB RAM, microSD storage and optional 256/256 TrustZone split… | ||
| Resurrecting The Read_Logs Permission on Samsung Devices | Ryan Johnson, Angelos Stavrou | 28m |
Researchers show a practical exploit that forces Samsung devices to emit world‑readable dumps containing Android and kernel logs by abusing… | ||
| API Deobfuscator: Identifying Runtime - Obfuscated API Calls Via Memory Access Analysis | Seokwoo Choi | 27m |
Builds a memory read/write map that links each original API function to the set of addresses written when that function is runtime‑obfuscated by Themida, then… | ||
| We Can Still Crack You! General Unpacking Method For Android Packer (no Root) | Yeongung Park | 33m |
Claims a general, no-root unpacking method that successfully recovers decrypted classes.dex from ~100 real-world Android packers (DexGuard, Ijiami, Bangcle… | ||
| DABiD: The Powerful Interactive Android Debugger for Android Malware Analysis | Jin-hyuk Jung, Jieun Lee | 31m |
DABiD is an interactive Android binary debugger that runs on a smartphone without root and implements three concrete capabilities: detects runtime code writes… | ||
| Exploiting Social Navigation | Nimrod Partush, Meital Ben Sinai, Shir Yadid | 30m |
Researchers create armies of fake Waze clients using Android emulators and ADB, set fake GPS reports, and program realistic stop-and-go movement to generate… | ||
| Security Content Metadata Model with an Efficient Search Methodology For Real Time Monitoring... | Preeti Subramanian | 27m |
Proposes a compact metadata schema that extracts essential fields from SCAP/MAEC XML into key-value properties stored as JSON or XML, indexed in MongoDB and… | ||
| Browsers Gone Wild | Angelo Prado, Xiaoran Wang | 59m |
Demonstrations show concrete, reproducible exploits: Punycode and Unicode emoji trick URLs (Unicode 7.8 adds ~250 emojis) that spoof the address bar in Safari… | ||
| Hiding Behind Android Runtime (ART) | Paul Sabanal | 53m |
Claim: Android Runtime (ART) can host a user-mode rootkit by editing framework or app bytecode, regenerating oat files with dex2oat, and patching dex file… | ||
| Bypassing Malware Detection Mechanisms in Online Banking | Jakub Kaluzny, Mateusz Olejarka | 43m |
Tests of JavaScript- and server-side detectors against real malware traffic show practical bypasses: feeding protected sites captured infected traffic and then… | ||
| Relaying EMV Contactless Transactions Using Off-The-Shelf Android Devices | Jordi Van den Breekel | 43m |
Demonstrates a working relay that uses two off-the-shelf Android devices (KitKat HCE) to forward EMV contactless NFC between card-in-pocket and a shop… | ||
| I Know Where You've Been: Geo-Inference Attacks Via The Browser Cache | Yaoqi Jia | ? |
Attack uses shared browser cache timing to infer country, city and even neighborhood by probing which resources are cached: it times Google logos, loads… | ||
| The Nightmare Behind The Cross Platform Mobile Apps Dream | Marco Grassi, Sebastian Guerrero | 45m |
Analysis of PhoneGap/Cordova, Unity, Corona, Adobe AIR and Titanium shows trivial extraction or bypasses that expose user data and allow runtime fraud… | ||
| MLD Considered Harmful - Breaking Another IPv6 Subprotocol | Antonios Atlasis, Jayson Salazar, Rafael Schaefer | 01h 02m |
Claim: Multicast Listener Discovery (MLD/MLDv2) is often unnecessary on typical IPv6 LANs and its design lets an attacker easily overload or disrupt… | ||
| Slime: Automated Anti-Sandboxing Disarmament System | Yosuke Chubachi, Kenji Aiko | 44m |
A prototype called SLIME uses a CPU-emulator to fake VM/sandbox artifacts (registry keys, BIOS strings, backdoor port behavior) and computes a per-instruction… | ||
| Locknote: Conclusions and Key Takeaways from | Jeff Moss | 01h 02m |
Argues that large-scale machine learning and anomaly detection often fail in real security data because examples in papers don’t match production, leaving… | ||
| Hacking the Wireless World with Software Defined Radio - 2.0 | Balint Seeber | 01h 00m |
Live demos use GNU Radio and USRPs (B200/B210/x310/e310) to capture up to 56 MHz of spectrum, run an OpenBTS 2G base station from a USB-powered board, and pull… | ||
| nothing matches | ||