BruCON Security Conference Courses

Looking Forward - Finding the Right Balance for INFOSEC

Exploring the future of cybersecurity, balancing technology and talent, and addressing challenges in the industry through automation, red teaming, and strategic focus.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

The .11 Veil, Camouflage & Covert! Invisible WiFi, Revealed

Unveiling hidden WiFi communication techniques, exploring covert methods, and analyzing security implications of invisible wireless networks.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Stealing a Mobile Using Wormholes

Explore mobile network vulnerabilities, SIM card access techniques, and baseband firmware analysis. Learn about "wormholes" in smartphones and their potential for identity theft and unauthorized authentication.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Biting into the Forbidden Fruit

Exploring JavaScript cryptography's vulnerabilities, debunking myths, and analyzing real-world implementations to provide an updated perspective on its security challenges and potential solutions.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Thunderbolts and Lightning - Snare

Explore Thunderbolt DMA attacks beyond FireWire adapters, discussing novel approaches and potential vulnerabilities in current hardware systems with Thunderbolt ports.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Security Model Bedfellows

Explore how integrating security, legal, and procurement can enhance software security from the start, reducing vulnerabilities and improving vendor accountability in the development process.

• YouTube
• 59 minutes
• Self-Paced
• Conference Talk

Investigating PowerShell Attacks

Explore PowerShell attack techniques, forensic artifacts, and investigation methods for detecting and mitigating threats in Windows environments.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

The Project of Prototype This

Hackers Joe Grand and Zoz share behind-the-scenes insights from their TV show "Prototype This," revealing challenges and innovative solutions in creating unique prototypes under tight constraints.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

Realtime Analysis and Visualization of the Zeus Botnet

Explore real-time analysis and visualization techniques for cybersecurity, covering data collection, processing, and reporting using advanced technologies like MongoDB, Redis, and API integration.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Uncovering SAP Vulnerabilities - Dissecting and Breaking the Diag Protocol

Dissecting SAP Diag protocol to uncover vulnerabilities, explore attack vectors, and enhance security in SAP Netweaver systems through novel tools and techniques for protocol analysis and exploitation.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

HTML5 - A Whole New Attack Vector

Explore HTML5's new features from an attacker's perspective, uncovering potential security vulnerabilities and innovative attack vectors in modern web browsers.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Introducing the Smartphone Penetration Testing Framework

Comprehensive framework for assessing smartphone security in organizations, covering various attack vectors and providing tools for penetration testing across multiple platforms.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

In Curation We Trust - Generating Contextual and Actionable Threat Intelligence

Optimizing threat intelligence with MISP: Learn to curate, contextualize, and automate TI feeds for actionable insights, reducing false positives and enhancing SOC, IR, and malware analysis collaboration.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Understanding the Discipline to Optimize Cyber Defense Collaboration

Explore the Cyber Threat Intelligence Analyst role, its competencies, and how it intersects with other cybersecurity disciplines to enhance collaboration and organizational security posture.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

The Story Continues - Hacking Some More Secure Portable Storage Devices

Exposé sur les failles de sécurité des dispositifs de stockage portables "sécurisés" avec chiffrement matériel AES, démontrant leur vulnérabilité malgré les promesses des fabricants.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk