DEFCONConference Courses

AMD Sinkclose - Universal Ring2 Privilege Escalation in System Management Mode

Delve into AMD processor security vulnerabilities, exploring System Management Mode (SMM), CPU design flaws, and the methodology behind ring-2 privilege escalation exploits.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Early Microprocessors and the 6502: A Historical and Technical Introduction

Explore the fascinating history of early microprocessors, focusing on the 6502 chip, its programming, and impact on vintage computing systems, with hands-on demonstrations and resources.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Nano Enigma: Uncovering the Secrets in eFuse Memories

Dive into the fascinating world of eFuse memory security, exploring physical extraction techniques from basic decapsulation to advanced SEM analysis for accessing encrypted data storage.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Maturing Your Application Security Program - A Practical Guide to Next Steps

Discover practical steps to advance your AppSec program through three maturity levels, with actionable strategies for immediate security posture improvement based on experience with 400+ companies.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Exploiting Cloud Provider Vulnerabilities for Initial Access in AWS

Dive into advanced AWS security vulnerabilities, focusing on IAM role exploitation, confused deputy attacks, and critical misconfigurations that enable unauthorized cloud environment access.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Exploiting Bluetooth Vulnerabilities: From Car Systems to Bank Account Security

Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicles and flight systems, using BlueToolkit framework for testing, with practical tips and new attack vectors for security research.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Top War Stories from Bug Bounty Hunting - High-Severity Exploits and Discoveries

Dive into real-world bug bounty hunting experiences, exploring high-severity vulnerabilities worth $10k-$60k, from simple RCE exploits to complex PII leakages, with detailed technical insights and lessons learned.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

The XZ Backdoor Story: How a Supply Chain Attack Nearly Compromised SSH Servers

Uncover the gripping investigation of the XZ backdoor incident, exploring the mysterious maintainer Jia Tan, technical analysis of the compromise, and crucial lessons for open-source security.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

3D Printing Medical Devices at Point of Care - AI and Healthcare Integration

Explore the intersection of 3D printing, AI, and healthcare through FDA's medical device production systems, examining stakeholder perspectives and point-of-care implementation challenges.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Digital Emblems - Standards for Machine-Readable International Markings

Explore the evolution of international marking systems into digital protocols, examining cryptographic validation methods and potential security implications for modern border and battlefield contexts.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Analyzing the Security of Satellite-Based Air Traffic Control Systems

Delve into satellite-based air traffic control security through ADS-C protocol analysis, exploring vulnerabilities in aircraft tracking systems and potential countermeasures for aviation safety.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Hacking the Space Link Extension Protocol - Security Vulnerabilities in Ground Control Systems

Explore security vulnerabilities in space mission communications through the Space Link Extension protocol, focusing on ground segment exploits and practical mitigation strategies for spacecraft control.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Attacks on GenAI Data and Using Vector Encryption for Protection

Explore cutting-edge vector encryption techniques and security measures to protect GenAI data from embedding inversion attacks while enabling privacy-preserving searches over encrypted vectors.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Behind Enemy Lines: Engaging and Disrupting Ransomware Web Panels

Dive into advanced strategies for infiltrating and disrupting ransomware operations by targeting their web panels, APIs, and command centers while gathering vital intelligence on threat actors.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Hacker vs AI Perspectives in National Security and Cyber Warfare

Explore AI's role in national security through an ex-spy's lens, blending pop culture references with real-world cybersecurity insights and interactive demonstrations of AI systems.

• YouTube
• 41 minutes
• Self-Paced
• Free Video