DEFCONConference Courses

Beginner's Guide to Hacking IoT Devices - Building Your First IoT Security Testing Lab

Discover practical IoT hacking techniques, from selecting beginner-friendly devices to building an affordable toolkit under $100. Learn common vulnerabilities and methods to gain device access using simple tools and tactics.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

HookChain: A New Perspective for Bypassing EDR Solutions

Discover a sophisticated EDR bypass technique combining IAT Hooking, dynamic SSN resolution, and indirect system calls to redirect Windows subsystem execution flow while remaining undetected by traditional security measures.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Travel Better: Expedient Digital Defense for Modern Travelers

Discover essential digital defense strategies for travel, focusing on free tools and OPSEC principles to protect your online presence and personal data while maintaining security awareness.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Simulating Attacks Against Hydroelectric Power Plants Using ICS Firing Range

Dive into a comprehensive simulation of cyberattacks on hydroelectric facilities, exploring both offensive tactics and defensive strategies through a custom-built ICS firing range environment.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

BOLABuster - Harnessing LLMs for Automating BOLA Detection

Discover how to leverage LLMs for automated BOLA vulnerability detection in APIs and web applications, exploring BOLABuster's innovative approach to identifying critical security risks at scale.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Kubernetes Attack Simulation - The Definitive Guide to Security Monitoring and Detection

Master Kubernetes security monitoring and attack simulation techniques for effective threat detection and defense in containerized environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

UDSonCAN Attacks - Discovering Safety Critical Risks by Fuzzing

Explore critical vehicle security vulnerabilities through UDSonCAN fuzzing techniques, revealing potential safety risks in diagnostic systems and their essential countermeasures for modern electric vehicles.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Abusing Legacy Railroad Signaling Systems - Security Vulnerabilities and Threats

Uncover critical vulnerabilities in railway signaling systems through an analysis of accessible hardware tools and their potential impact on train operations, with focus on Spanish infrastructure.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Building a Secure and Resilient Nationwide EV Charging Network

Explore cybersecurity challenges and policy considerations in the rapidly expanding EV charging infrastructure, focusing on vulnerability assessment and risk mitigation strategies.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Web Cache Exploitation: Advanced Techniques for Static Path Deception and Cache Key Confusion

Discover powerful web cache exploitation techniques, including Static Path Deception and Cache Key Confusion, to identify and exploit URL parsing vulnerabilities across major platforms like Azure Cloud and Cloudflare.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Bug Hunting in VMware Device Virtualization - Security Vulnerabilities and Attack Surfaces

Delve into VMware device virtualization security, exploring USB system vulnerabilities, SCSI device emulation, and VMKernel design flaws through real-world bug hunting experiences and discoveries.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

What History's Greatest Heist Can Teach Us About Defense in Depth

Explore the fascinating Antwerp Diamond Heist to understand defense-in-depth security principles through analysis of history's greatest vault breach and its modern cybersecurity implications.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Secret Life of Rogue Devices: Lost IT Assets on the Public Marketplace

Uncover the alarming journey of lost corporate devices in public markets through data scraping, OCR clusters, reverse engineering, and conversations with underground collectors.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

The Way to Android Root: Exploiting Smartphone GPU

Dive into advanced Android security research exploring Qualcomm Adreno GPU vulnerabilities, exploitation techniques, and kernel-level attacks to achieve root access, with practical mitigation strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Dysfunctional Unity: Medical Device Security and Hospital Network Vulnerabilities

Explore critical vulnerabilities in medical devices and hospital networks, examining security challenges, SBOM misconceptions, and strategies for creating more secure healthcare environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video