DEFCONConference Courses

Sneaky Extensions - Bypassing MV3 Security in Browser Extensions

Discover how browser extensions can exploit security vulnerabilities in MV3, including webcam hijacking, credential theft, and arbitrary code execution, while learning protective measures against these threats.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Unexpected Exposures in the Secure Shell - SSH Security Testing and Research

Delve into SSH security vulnerabilities, implementation challenges, and exploitation techniques across various platforms, featuring the new open-source testing tool 'sshamble'.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Breaking Network Crypto in Popular Chinese Keyboard Apps

Uncover security vulnerabilities in Chinese IME keyboards' network protocols and how attackers can intercept keystrokes from 800 million users due to poorly implemented encryption methods.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Relative Path File Injection: The Next Evolution in RPO

Discover how Relative Path File Injection attacks can turn trusted websites into malware delivery platforms, exploring detection methods and real-world implementations through practical demonstrations.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

RF Attacks on Aviation's Defense Against Mid-Air Collisions

Uncover groundbreaking vulnerabilities in aviation's TCAS II collision avoidance system, exploring RF attack methods that can manipulate traffic advisories and disable critical safety features in aircraft.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Safecracking Fundamentals: Understanding Mechanical Combination Safe Locks

Master the art of mechanical safe manipulation through expert techniques, wheel isolation methods, and vulnerability analysis for Group 2 locks, enhancing your locksport knowledge.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Optical Espionage: Using Lasers to Hear Keystrokes Through Glass Windows

Discover how lasers and physics enable remote keystroke detection through windows, exploring side-channel attacks, signal interpretation, and modern espionage techniques for data extraction.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Reverse Engineering and Hacking Ecovacs Robots - Security Vulnerabilities and Privacy Concerns

Dive into the security vulnerabilities of Ecovacs robots, exploring broken encryption, unauthorized camera access, and privacy concerns while learning techniques for privacy-preserving usage and rooting.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Unraveling the Threads of USPS Smishing and Fighting Back - Reverse Engineering SMS Phishing Kits

Dive into the technical investigation of USPS-themed SMS phishing attacks, exploring vulnerability exploitation, reverse engineering techniques, and methods to combat scammer operations targeting US consumers.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Defeating EDR Evading Malware with Memory Forensics

Discover advanced memory forensics techniques to detect and analyze EDR-evading malware, including system call manipulation, module overwriting, and debug register abuse.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Breaching AWS Through Shadow Resources - Critical Vulnerabilities and Security Implications

Uncover critical AWS vulnerabilities and security insights through real-world examples of shadow resource exploitation, featuring detection methods, privilege escalation techniques, and best practices for cloud security.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Outlook Unleashing RCE Chaos: Exploiting CVE-2024-30103

Dive into the critical Outlook security vulnerabilities, exploring remote code execution exploits through COM objects, NTLM leaks, and essential mitigation strategies for enterprise protection.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

MoWireless MoProblems: Modular Wireless Survey System and Data Analytics with PacketGlass

Discover how to build and implement a modular wireless survey system using PacketGlass for efficient collection, visualization, and analysis of massive wireless network data through Elastic-based analytics.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Famous and Not So Famous Unsolved Codes and Ciphers Throughout History

Explore fascinating unsolved codes and ciphers throughout history, from CIA's Kryptos sculpture to mysterious WWII pigeon messages and encrypted postcards from notable figures.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Exposing Attacks Hiding in the Sheer Noise of False Positives - Using Data Science for Security Operations

Discover how data science transforms overwhelming security data into actionable insights, helping identify coordinated attacks amid false positives using open-source models and security knowledge encoding.

• YouTube
• 55 minutes
• Self-Paced
• Free Video