DEFCONConference Courses

The Curse of the Ncurses

Dive into the intricacies of Ncurses programming and its challenges through an engaging exploration of common pitfalls, solutions, and advanced implementation techniques.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Bootsquad: Introduction to Secure Boot Exploitation and Defense

Dive into the world of cybersecurity and virtual reality as Joe Mast presents Bootsquad, exploring innovative security concepts and challenges in the DCGVR Village at DEF CON 31.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

VR Workspaces - Creating Virtual Reality Development Environments

Explore the innovative world of VR workspaces and their applications in cybersecurity through insights from the DCGVR Village at DEF CON 31.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Gender Inclusive Health Information System

Explore the development of inclusive healthcare information systems that accommodate diverse gender identities, focusing on data architecture and patient-centered design approaches.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Hey Crypto Bro - Understanding Cryptocurrency Security and Risks

Dive into the world of cryptocurrency and cybersecurity through an engaging DEF CON 31 presentation exploring critical insights and emerging threats in the crypto landscape.

• YouTube
• 1 hour 14 minutes
• Self-Paced
• Free Video

Ghost On The Wire

Explore cutting-edge virtual reality security concepts and challenges through expert insights from DEF CON 31's DCGVR Village presentation on digital vulnerabilities.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

What Is a GRC Hacker - Understanding Governance, Risk, and Compliance Security

Discover the role and mindset of GRC (Governance, Risk, and Compliance) hackers in cybersecurity through expert insights and practical perspectives from DEF CON 31.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Breaking BMC: The Forgotten Key to the Kingdom - Security Vulnerabilities in Baseboard Management Controllers

Dive into the security vulnerabilities of Baseboard Management Controllers (BMC), exploring exploit chains and firmware implants in NVIDIA hardware with AMI MegaRAC BMC implementation.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Contextualizing The Vulkan Leaks and State-Sponsored Offensive Operations

Explore the implications of the Vulkan files leak, examining Russian cyber capabilities and their connection to global state-sponsored network warfare programs and automated exploitation systems.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Vulnerabilities in Global Transportation Payment Systems - Security Risks and Exploits

Uncover critical security vulnerabilities in public transportation payment systems, focusing on Moovit's API weaknesses, unauthorized access risks, and solutions for protecting user data and preventing payment fraud.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Terminally Owned - 60 Years of Terminal Escape Code Vulnerabilities

Explore terminal security vulnerabilities across platforms, from ASCII's escape character origins to modern exploit techniques, revealing critical remote code execution risks and defense strategies.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Contactless Overflow Code Execution Vulnerabilities in Payment Terminals and ATMs

Uncover critical NFC payment terminal vulnerabilities and their exploitation through contactless attacks, including ATM jackpotting techniques and firmware manipulation across major payment systems worldwide.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Automotive USB Fuzzing: Efficient Methods and Real-World Vulnerabilities

Dive into automotive USB fuzzing techniques and discover efficient methods for testing vehicle vulnerabilities through direct USB connections, featuring real-world case studies and practical demonstrations.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

RingHopper: From User-Land to SMM - A Journey Through UEFI Vulnerabilities

Delve into the discovery of RingHopper, a critical UEFI vulnerability affecting billions of devices, exploring exploitation techniques and elevation methods across Windows and Linux systems.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Abusing CAN Bus Specifications for DoS Attacks in Embedded Systems

Explore CAN bus protocol vulnerabilities in automotive systems, focusing on how attackers can exploit metadata fields and protocol specifications to create denial-of-service attacks in embedded systems.

• YouTube
• 37 minutes
• Self-Paced
• Free Video