DEFCONConference Courses

Exploiting Bluetooth Vulnerabilities: From Vehicle Systems to Bank Account Access

Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicle systems using BlueToolkit, exploring real-world security implications and practical attack vectors in automotive and aviation contexts.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Differential Privacy Beyond Algorithm: Challenges for Deployment

Explore the practical challenges of implementing differential privacy systems, from explaining technical guarantees to non-experts to preventing misuse and integrating with existing security tools.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Hacking Millions of Modems and Investigating Modem Security Vulnerabilities

Dive into a real-world investigation of modem vulnerabilities, ISP security flaws, and the concerning centralization of broadband infrastructure through a personal hacking incident analysis.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Efficient Bug Bounty Automation Techniques for Time and Resource Optimization

Master efficient bug bounty automation techniques to enhance hunting speed, bypass limitations, and maximize earnings through strategic tools and methodologies for finding vulnerabilities first.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Finding Zero-Day Vulnerabilities in Vilo Home Routers - Security Research Process and Discoveries

Discover how student researchers uncovered 9 zero-day vulnerabilities in Vilo routers through hardware hacking, firmware analysis, and cloud infrastructure investigation, highlighting IoT security challenges.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

No Symbols When Reversing? No Problem - Bring Your Own Symbols for Binary Analysis

Discover efficient techniques for analyzing unknown functions in binaries, focusing on portable symbol creation and management using Ghidra, with practical examples from Golang-based malware analysis.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Finding and Exploiting Local Security Vulnerabilities in 1Password for MacOS

Explore critical security vulnerabilities in 1Password's MacOS app, including local vault exploitation, IPC weaknesses, and Chrome extension flaws that could compromise password security.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Grand Theft Actions - Abusing Self-Hosted GitHub Runners for Supply Chain Attacks

Dive into critical security vulnerabilities in GitHub Actions, exploring real-world attacks on self-hosted runners and learning how to prevent supply chain compromises in major open-source projects.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Developing a Low-Cost Raspberry Pi Device for ADS-B Spoofing Detection

Discover how to build Fly Catcher, a Raspberry Pi-based device using neural networks to detect spoofed aircraft signals through ADS-B monitoring and analysis in real-time.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

From Theory to Reality: Demonstrating SPARTA Techniques Through Ground Infrastructure Attacks

Discover how to exploit space mission vulnerabilities through ground infrastructure attacks, focusing on SPARTA techniques and man-in-the-middle exploits for spacecraft communications.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

NTLM Authentication Vulnerabilities and Exploits - A Final Analysis

Dive into critical NTLM authentication vulnerabilities, exploring new bugs, bypass techniques, and security control gaps in Windows systems before Microsoft phases out this protocol.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Fine-Grained Authorization with Relationship Based Access Control

Explore fine-grained authorization through relationship-based access control (ReBAC), offering practical solutions for complex permission scenarios beyond traditional role-based systems.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Disenshittify or Die - How Hackers Can Seize the Means of Computation

Explore how corporate control and lack of regulation transformed the internet, and discover actionable strategies for reclaiming digital freedom and building a better online future.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Social Engineering and Security Awareness in Virtual Reality

Dive into a thought-provoking keynote address from renowned security expert Jayson Street at DEF CON 31's DCGVR Village, exploring cutting-edge cybersecurity insights and industry perspectives.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Taking Down Applications with Logic - DEF CON 31

Dive into advanced application security techniques and learn how logical vulnerabilities can be exploited to compromise web applications, demonstrated through real-world examples.

• YouTube
• 40 minutes
• Self-Paced
• Free Video