BruCON Security Conference Courses

Automating Binary Analysis with Ghidra's P-Code

Explore automated binary analysis using Ghidra's P-Code, an intermediate language that enables architecture-independent scripting for reverse engineering and vulnerability research.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Tales from Professional Thieves

Professional thieves share insider techniques for bypassing physical security, including sneaking in, fake badges, and social engineering, along with entertaining stories from real-world engagements.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Internet Scale Analysis of AWS Cognito Security

Análisis de seguridad a escala de Internet de configuraciones de AWS Cognito, revelando vulnerabilidades comunes y acceso no autorizado a recursos de AWS. Incluye demostraciones, metodología y recomendaciones para desarrolladores.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

It Takes a Village

Strategies for building diverse security teams, addressing hiring challenges, and fostering talent through mentorship and professional development in the rapidly evolving cybersecurity landscape.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Security Transition from 4G to 5G - Are We Secure Enough?

Exposición de vulnerabilidades en protocolos 5G/4G, afectando operadores y dispositivos. Demostraciones de ataques de secuestro, degradación y agotamiento de batería. Discusión de soluciones y interacciones con proveedores.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

Cloud SIEM - What Happened and What's Next?

Explore cloud SIEM's impact on cybersecurity, from real-time threat detection to AI-driven responses. Learn how this technology reshapes security teams, risk management, and the future of threat hunting.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Using Blue Team Techniques in Red Team Ops

Innovative techniques for advanced red team operations, including infrastructure management, blue team detection, and dynamic adjustments to enhance effectiveness and evasion.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Process Control through Counterfeit Comms

Explore vulnerabilities in PLCs, focusing on discovery methods and how combining minor flaws can lead to device takeover. Learn about SNMP exploitation, memory manipulation, and firmware modification.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

Forging Trusts for Deception in Active Directory

Explore forging trusts in Active Directory for deception-based defense. Learn techniques to implant decoy objects, trap adversaries, and enhance network security through live demonstrations.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

All Your Cloud Are Belong To Us – Hunting Compromise in Azure

Explore cloud security vulnerabilities, attack tactics, and proactive measures for Azure and AWS. Learn about hunting compromised systems and securing cloud marketplaces.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Signatures Are Dead - Long Live Resilient Signatures

Insights on creating resilient, high-fidelity threat detections that withstand evasion attempts, with practical examples from real-world attacks and methodologies for effective detection development.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Social Engineering for Penetration Testers

Explore social engineering techniques, their evolution, and practical applications in penetration testing. Learn from real-world examples and scenarios to enhance your security assessment skills.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

Hacking Driverless Vehicles

Exploring vulnerabilities in autonomous vehicles: sensors, decision profiles, and potential exploits. Insights into connected vehicle programs and their security implications for future transportation systems.

• YouTube
• 1 hour 7 minutes
• Self-Paced
• Conference Talk

DYODE - Do Your Own Dyode

Explore DYODE, a low-cost DIY data diode for securing Industrial Control Systems. Learn about its development, components, and applications in file transfer, Modbus data, and remote debugging.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Hacking Invisibly and Silently with Light and Sound

Explore innovative hacking techniques using light and sound, from C2 channels and exfiltration to disrupting motion detectors and speech jamming. Learn advantages, disadvantages, and mitigation strategies for these unconventional attacks.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk