DEFCONConference Courses

Securing CCTV Cameras Against Blind Spots - Analysis of Location-Based Detection Vulnerabilities

4 ratings

Explore how CCTV camera blind spots create security vulnerabilities through location-based confidence weakness, and learn about TipToe - a novel evasion attack demonstrating detection flaws across various conditions.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

The Interplay Between Safety and Security in Aviation Systems

3 ratings

Explore the critical relationship between aviation safety and cybersecurity standards, from DO-178 to DO-356A, understanding system design principles, assurance levels, and threat modeling in modern aircraft systems.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Counter Deception: Defending Yourself in a World Full of Lies

2 ratings

Discover practical strategies to detect and defend against digital deception across network layers, from electromagnetic spoofing to false narratives, while developing critical skills to discern truth in our interconnected world.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Paywall Optional - Stream for Free with New Recursive Request Exploits Technique

1 rating

Discover Recursive Request Exploits (RRE), a new attack methodology that bypasses authentication and payment controls by weaponizing interdependent web requests to exploit logic flaws.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Cybersecurity Education: Making the Case for K-12 Privacy and Security Curriculum

1 rating

Explore how to integrate essential cybersecurity and data privacy education into K-12 curricula, addressing the critical need for early digital safety awareness and institutional protection measures.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Reflections on a Decade in Bug Bounties - From Novice to Seasoned Hunter

Gain insights into the evolution of bug bounty hunting through a decade-long journey, from basic vulnerability reporting to crafting critical impact chains, with perspectives from both hunter and triage sides.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Reverse Engineering MicroPython Frozen Modules

Dive into advanced techniques for identifying and reverse engineering frozen MicroPython modules in firmware using Ghidra, focusing on bytecode analysis and module reconstruction methods.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Sudos and Sudon'ts - Peering Inside Sudo for Windows

Delve into Windows security mechanisms through an analysis of Sudo for Windows, exploring process elevation, ALPC services, and Rust-Windows API interactions while uncovering potential security vulnerabilities.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Speed Bumps and Speed Hacks - Adventures in Car Manufacturing Security

Dive into critical security vulnerabilities affecting major car manufacturers' web applications, exploring real-world attacks, impact chains, and the importance of responsible disclosure policies.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Process Injection Attacks with Return-Oriented Programming - Advanced Techniques and Methodologies

Discover advanced process injection techniques using return-oriented programming (ROP), including unique string comparison solutions, multiple WinAPI patterns, and practical methodologies for reliable implementation.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Vehicle-to-Game: Using Your Car as a Game Controller

Discover how to transform your car into a unique game controller using Python, exploring vehicle networks, CAN bus communication, and diagnostic interfaces for an innovative gaming experience.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Spies and Bytes: Victory in the Digital Age

Delve into modern cyber warfare insights from General Nakasone's leadership at NSA and U.S. Cyber Command, exploring national security strategies, threat responses, and the future of digital conflict.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Manipulating Shim and Office Infrastructure for Code Injection and Privilege Escalation

Delve into advanced Windows exploitation techniques, focusing on stealthy shim manipulation and Office infrastructure vulnerabilities for code injection and privilege escalation attacks.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

The Hack, the Crash and Two Smoking Barrels - Automotive Cybersecurity Challenges

Dive into automotive cybersecurity challenges through real-world stories and demonstrations, exploring vehicle architecture vulnerabilities and industry practices while witnessing live ECU hacking and security testing scenarios.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls

Discover techniques for exploiting email address parsing vulnerabilities to bypass security controls, spoof domains, and access protected systems through RFC-compliant manipulation.

• YouTube
• 36 minutes
• Self-Paced
• Free Video