DEFCONConference Courses

Securing CCTV Cameras Against Blind Spots - Analysis of Location-Based Detection Vulnerabilities

5 ratings

Explore how CCTV camera blind spots create security vulnerabilities through location-based confidence weakness, and learn about TipToe - a novel evasion attack demonstrating detection flaws across various conditions.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

The Interplay Between Safety and Security in Aviation Systems

3 ratings

Explore the critical relationship between aviation safety and cybersecurity standards, from DO-178 to DO-356A, understanding system design principles, assurance levels, and threat modeling in modern aircraft systems.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Counter Deception: Defending Yourself in a World Full of Lies

2 ratings

Discover practical strategies to detect and defend against digital deception across network layers, from electromagnetic spoofing to false narratives, while developing critical skills to discern truth in our interconnected world.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

3D Printing Medical Devices at Point of Care - AI and Healthcare Integration

1 rating

Explore the intersection of 3D printing, AI, and healthcare through FDA's medical device production systems, examining stakeholder perspectives and point-of-care implementation challenges.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Cyber Volunteering and Community Defense - 1 Year In

1 rating

Discover how hackers and technologists protect communities through cyber volunteering, ransomware response, and grassroots defense initiatives in this DEF CON update.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Paywall Optional - Stream for Free with New Recursive Request Exploits Technique

1 rating

Discover Recursive Request Exploits (RRE), a new attack methodology that bypasses authentication and payment controls by weaponizing interdependent web requests to exploit logic flaws.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Cybersecurity Education: Making the Case for K-12 Privacy and Security Curriculum

1 rating

Explore how to integrate essential cybersecurity and data privacy education into K-12 curricula, addressing the critical need for early digital safety awareness and institutional protection measures.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

WHAD: A Framework for Wireless Protocol Hacking and Analysis

Discover WHAD, a versatile framework for wireless protocol hacking that enables hardware interoperability and simplified tool development for security researchers exploring wireless vulnerabilities.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

What to Expect When You're Exploiting - Zero-Day Vulnerabilities in Baby Monitors and Wi-Fi Cameras

Uncover critical security vulnerabilities in Wi-Fi cameras and baby monitors, exploring attack surfaces, privacy issues, and zero-day exploits while learning practical remediation strategies for IoT devices.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Command Injection Vulnerabilities in CI/CD Pipelines - Securing Bazel GitHub Actions

Discover critical security vulnerabilities in CI/CD pipelines through a case study of Bazel GitHub Action, learning practical strategies to protect your projects from command injection attacks.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Warflying: Aerial WiFi Network Detection and Analysis from a Cessna

Explore the fascinating intersection of WiFi scanning and aviation as two researchers conduct aerial wireless network detection experiments using a Cessna, revealing surprising insights about signal ranges and detection capabilities.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

MaLDAPtive: LDAP Query Obfuscation and De-Obfuscation Techniques

Dive into advanced LDAP query obfuscation techniques and defense strategies, exploring a comprehensive framework for detecting and preventing directory services attacks through custom tokenization and parsing.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Red Team Attack Simulation for Operational Technology - Real-World Case Studies

Dive into real-world attack vectors and strategies for industrial networks through a decade of Red Team exercises, focusing on operational technology and control system vulnerabilities.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Using EPSS for Better Vulnerability Management

Discover how to implement EPSS for vulnerability management, leveraging data-driven insights to predict and prioritize exploit risks in CI/CD pipelines and system patching processes.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Lessons Learned from Building and Defending LLM Applications

Gain insights into real-world challenges and practical strategies for developing secure LLM applications, exploring vulnerabilities, defense mechanisms, and best practices for robust AI systems.

• YouTube
• 27 minutes
• Self-Paced
• Free Video