DEFCONConference Courses

Decoding Galah - An LLM-Powered Web Honeypot

Discover how LLM-powered honeypot Galah revolutionizes web security by dynamically simulating multiple applications and analyzing attacker behavior through intelligent HTTP response generation.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Transforming Application Security: Protecting Everything as Code

Explore modern application security challenges and solutions in cloud-native environments, from threat modeling to real-time detection, with emphasis on securing 'everything as code' ecosystems.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Using ALPC Security Features to Compromise RPC Services

Dive into Windows kernel security through ALPC and RPC services, exploring vulnerability exploitation techniques, security bypass methods, and system privilege escalation strategies.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

A Deep Dive into Aircraft Public Key Infrastructure and Security

Explore aircraft cybersecurity through PKI systems, from software protection to network authentication, and understand emerging quantum computing threats to aviation security.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana

Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Building a Custom ADS-B Aircraft Tracking System Using Hardware Optimization

Discover how to build a custom ADS-B aircraft tracking system using cost-effective hardware alternatives, implementing Linux and signal processing for efficient aircraft monitoring and visualization.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Breaking the Beam - Exploiting VSAT Modems from Earth

Discover groundbreaking security vulnerabilities in VSAT satellite modems through reverse engineering, exploring software stack exploits and demonstrating wireless signal injection attacks for remote access.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Ethical and Secure AI Vulnerability Disclosure - Challenges and Best Practices

Explore the complexities of AI vulnerability disclosure, focusing on ethical challenges, bias management, and security implications while examining real-world cases and solutions for responsible reporting.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

A Shadow Librarian: Fighting Back Against Encroaching Capitalism

Explore the underground resistance against digital content restrictions in public libraries, examining creative solutions to combat corporate control and ensure open access to knowledge.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

The Risk and Reward of Distributed Industrial Control - Cybersecurity in Remote Infrastructure Management

Explore the cybersecurity challenges of remotely controlled industrial assets, examining real-world incidents and practical mitigation strategies for protecting critical infrastructure operations.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Exploiting Localhost APIs From The Browser - Zero-Day Vulnerability and Attack Techniques

Discover how browser-based attacks exploit localhost services through a zero-day vulnerability, featuring live demonstrations of remote code execution and novel attack techniques targeting developers behind firewalls.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Social Engineering Techniques for Physical Access Red Team Operations

Dive into real-world social engineering tactics through a first-person narrative of complex red team operations, exploring methodologies for physical access and critical infrastructure penetration testing.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

AWS CloudQuarry: Digging for Secrets in Public AMIs

Dive into AWS security vulnerabilities through an analysis of 3.1M AMIs, exploring credential exposure risks, detection methodologies, and essential cloud security practices for preventing breaches.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

DriverJack: Turning NTFS and Emulated ROFs into an Infection

Discover advanced exploitation techniques targeting NTFS and emulated filesystem vulnerabilities, exploring novel attack vectors that bypass Windows security measures and maintain system persistence.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Unsaflok - Hacking Millions of Hotel Locks and Electronic Access Control Systems

Discover critical vulnerabilities in dormakaba Saflok hotel locks, including key card forgery techniques, security implications, and how to verify if your room's lock has been patched for protection.

• YouTube
• 42 minutes
• Self-Paced
• Free Video