BruCON Security Conference Courses

The Story Continues - Hacking Some More Secure Portable Storage Devices

A security talk exposing practical attacks against portable USB storage devices marketed with hardware AES encryption and biometric protection.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

INCONTROLLER - New Malware Developed to Target Industrial Control Systems

An analysis of INCONTROLLER, state-sponsored malware targeting Schneider Electric and Omron industrial controllers with capabilities for disruption, sabotage, and physical destruction.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

LOLDocs - Sideloading in Signed Office Files

Explores how malicious code can be hidden in signed Microsoft Office add-ins through code side-loading, enabling phishing while preserving document signatures.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

I Am Become Loadbalancer, Owner of Your Network

Explore load balancer architecture, management planes, and post-breach access, with tactics for moving laterally without disrupting traffic or revealing your presence.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Adaptive Adversaries

Explore how evolving adversaries adapt their techniques and how defenders can build resilient protections beyond previously identified attacks.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Defeating EDRs Using Dynamic Invocation in C#

A conference talk on bypassing endpoint detection and response through dynamic invocation techniques in C#.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

A Critical Assessment of Supply Chain Intrusion Vectors

Examines how software, hardware, and trusted-vendor supply chain intrusions differ, what makes them difficult to execute, and how defenders can detect or mitigate them.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

How to Make Belgium One of the Least Cyber Vulnerable Countries

Belgium’s national cyber strategy and the European initiatives shaping plans to protect essential services, citizens, administrations, and critical infrastructure.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

The Risk of CI - CD Pipeline Poisoning via CodeBuild

Examines how AWS CodeBuild can poison CI/CD pipelines, bypass SDLC security controls, exfiltrate secrets, tamper with applications, and compromise deployment servers.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Visibility Beyond Perimeters - Detecting C2 at Time of Execution

Explore network-based indicators of compromise to detect command-and-control activity in near real time without endpoint agents, with ransomware-response examples.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

PIC Your Malware

Explore position-independent payloads, custom PE loaders, and automated build protections for evading endpoint logging, memory analysis, and security products.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Black Ops of TCP/IP 2011

A keynote exploring the hidden security implications and attack possibilities of TCP/IP.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Exploits in Wetware

A live contest case study showing how OSINT and vishing can expose an organization's sensitive information—and how companies can reduce social engineering risk.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Finding 0days in Embedded Systems with Code Coverage Guided Fuzzing

A deeply technical presentation on extracting and emulating embedded firmware, then using dynamic binary instrumentation for coverage-guided fuzzing to uncover zero-day vulnerabilities.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

When Lemon Markets, Imposter Syndrome & Dunning-Kruger Collide

Examines how market failures and cognitive biases can hinder organizational security and the design of useful security products.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk