BruCON Security Conference Courses

Forging Trusts for Deception in Active Directory

Explore forging trusts in Active Directory for deception-based defense. Learn techniques to implant decoy objects, trap adversaries, and enhance network security through live demonstrations.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

All Your Cloud Are Belong To Us – Hunting Compromise in Azure

Explore cloud security vulnerabilities, attack tactics, and proactive measures for Azure and AWS. Learn about hunting compromised systems and securing cloud marketplaces.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Signatures Are Dead - Long Live Resilient Signatures

Insights on creating resilient, high-fidelity threat detections that withstand evasion attempts, with practical examples from real-world attacks and methodologies for effective detection development.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

Social Engineering for Penetration Testers

Explore social engineering techniques, their evolution, and practical applications in penetration testing. Learn from real-world examples and scenarios to enhance your security assessment skills.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Conference Talk

Hacking Driverless Vehicles

Exploring vulnerabilities in autonomous vehicles: sensors, decision profiles, and potential exploits. Insights into connected vehicle programs and their security implications for future transportation systems.

• YouTube
• 1 hour 7 minutes
• On-Demand
• Conference Talk

DYODE - Do Your Own Dyode

Explore DYODE, a low-cost DIY data diode for securing Industrial Control Systems. Learn about its development, components, and applications in file transfer, Modbus data, and remote debugging.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Hacking Invisibly and Silently with Light and Sound

Explore innovative hacking techniques using light and sound, from C2 channels and exfiltration to disrupting motion detectors and speech jamming. Learn advantages, disadvantages, and mitigation strategies for these unconventional attacks.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

A Market Solution for Product Safety and Corporate Governance

Exploring innovative approaches to monetize vulnerabilities and address product security issues through cybersecurity-backed short positions in financial markets.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

From Weakest Link to Retaliation Weapon - Building Efficient Anti-Social Engineering Awareness Program

Explore effective strategies for building resilience against social engineering threats, drawing insights from behavioral science and real-world applications in high-risk environments.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Evading Microsoft ATA for Active Directory Domination

Explore techniques for evading Microsoft ATA in Active Directory environments, including threat detection bypasses, attack chain modifications, and strategies for maintaining domain dominance.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Open Source Security Orchestration

Explore open-source security orchestration using Adaptive Network Protocol (ANP) for efficient threat response, automated network defense, and improved visibility across multiple systems and clouds.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Virtual Terminals, POS Security and Becoming a Merchant

Explore virtual terminals, POS security, and payment fraud techniques. Learn about transaction vulnerabilities, card exploitation, and merchant-side risks in electronic payment systems.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Scraping Leaky Browsers for Fun and Passwords

Explore techniques for extracting sensitive data from browser memory dumps, including passwords and session tokens, with insights on potential solutions and vendor responses.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Security Through Design

Explore security through design principles, examining real-world examples and innovative approaches to create safer digital environments and user interactions.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Inventing Defense

Explore the evolution and challenges of cybersecurity defense through historical analogies, myths, and modern-day realities in this thought-provoking keynote address.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk