DEFCONConference Courses

Securing CCTV Cameras Against Blind Spots - Analysis of Location-Based Detection Vulnerabilities

4 ratings

Explore how CCTV camera blind spots create security vulnerabilities through location-based confidence weakness, and learn about TipToe - a novel evasion attack demonstrating detection flaws across various conditions.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

The Interplay Between Safety and Security in Aviation Systems

3 ratings

Explore the critical relationship between aviation safety and cybersecurity standards, from DO-178 to DO-356A, understanding system design principles, assurance levels, and threat modeling in modern aircraft systems.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Counter Deception: Defending Yourself in a World Full of Lies

2 ratings

Discover practical strategies to detect and defend against digital deception across network layers, from electromagnetic spoofing to false narratives, while developing critical skills to discern truth in our interconnected world.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Paywall Optional - Stream for Free with New Recursive Request Exploits Technique

1 rating

Discover Recursive Request Exploits (RRE), a new attack methodology that bypasses authentication and payment controls by weaponizing interdependent web requests to exploit logic flaws.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Breaking Secure Web Gateways: Last Mile Reassembly Attacks

Uncover critical vulnerabilities in Secure Web Gateways through "Last Mile Reassembly Attacks" and learn how to bypass enterprise-grade security solutions using an open-source attack toolkit.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Web Timing Attacks That Actually Work - Practical Techniques and Tools

Discover practical web timing attack techniques to uncover server secrets, masked vulnerabilities, and hidden attack surfaces using efficient, real-world methods and open-source tools.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Abusing Windows Hello Authentication Without Biometric Data

Delve into Windows Hello's security vulnerabilities and authentication mechanisms, exploring attack vectors and hardware protection bypasses for biometric authentication without physical compromise.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

WHAD: A Framework for Wireless Protocol Hacking and Analysis

Discover WHAD, a versatile framework for wireless protocol hacking that enables hardware interoperability and simplified tool development for security researchers exploring wireless vulnerabilities.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

What to Expect When You're Exploiting - Zero-Day Vulnerabilities in Baby Monitors and Wi-Fi Cameras

Uncover critical security vulnerabilities in Wi-Fi cameras and baby monitors, exploring attack surfaces, privacy issues, and zero-day exploits while learning practical remediation strategies for IoT devices.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Command Injection Vulnerabilities in CI/CD Pipelines - Securing Bazel GitHub Actions

Discover critical security vulnerabilities in CI/CD pipelines through a case study of Bazel GitHub Action, learning practical strategies to protect your projects from command injection attacks.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Warflying: Aerial WiFi Network Detection and Analysis from a Cessna

Explore the fascinating intersection of WiFi scanning and aviation as two researchers conduct aerial wireless network detection experiments using a Cessna, revealing surprising insights about signal ranges and detection capabilities.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

MaLDAPtive: LDAP Query Obfuscation and De-Obfuscation Techniques

Dive into advanced LDAP query obfuscation techniques and defense strategies, exploring a comprehensive framework for detecting and preventing directory services attacks through custom tokenization and parsing.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Red Team Attack Simulation for Operational Technology - Real-World Case Studies

Dive into real-world attack vectors and strategies for industrial networks through a decade of Red Team exercises, focusing on operational technology and control system vulnerabilities.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Using EPSS for Better Vulnerability Management

Discover how to implement EPSS for vulnerability management, leveraging data-driven insights to predict and prioritize exploit risks in CI/CD pipelines and system patching processes.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Lessons Learned from Building and Defending LLM Applications

Gain insights into real-world challenges and practical strategies for developing secure LLM applications, exploring vulnerabilities, defense mechanisms, and best practices for robust AI systems.

• YouTube
• 27 minutes
• Self-Paced
• Free Video