DEFCONConference Courses

The UnRightful Heir - My dMSA Is Your New Domain Admin

Discover how to exploit Microsoft's new dMSAs to escalate Active Directory privileges, even in domains not using them, through the BadSuccessor attack technique.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Finding and Exploiting Kernel Vulnerabilities in the eBPF Subsystem

Discover advanced techniques for finding and exploiting eBPF kernel vulnerabilities through state-aware fuzzing, verifier bypasses, and JIT compiler flaws for security research.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

DDoS - The Next Generation

Explore the evolving landscape of DDoS attacks and cutting-edge prevention strategies in this comprehensive cybersecurity presentation.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

How Not to IoT - Lessons in Security Failures

Uncover critical IoT security flaws through real-world examples of vulnerable devices, from WiFi credential leaks to pre-installed malware and command injection attacks.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

No Brain No Gain - EEG-Based Authentication for IoT Security

Explore EEG-based authentication for IoT security, using brain signals as dynamic biometric identifiers to overcome traditional digital security limitations and deepfake vulnerabilities.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

Flipping Locks - Remote Badge Cloning with the Flipper Zero and More

Discover advanced RFID badge cloning techniques using Flipper Zero and custom hardware for remote penetration testing without direct target interaction.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Carding is Dead, Long Live Carding - NFC Relay Attacks and Malware-as-a-Service Platforms

Explore the resurgence of carding through NFC relay attacks and Malware-as-a-Service platforms targeting contactless payments with advanced fraud techniques.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Unveiling the Perils of the TorchScript Engine in PyTorch

Uncover critical security vulnerabilities in PyTorch's TorchScript engine that challenge the safety of weights_only=True, revealing RCE risks in AI applications.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Recording PCAPs from Stingrays With a $20 Hotspot

Discover how to detect cell site simulators using a $20 hotspot and Wireshark to analyze cellular traffic between phones and towers, protecting against surveillance.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

HTTP 1.1 Must Die! The Desync Endgame

Uncover advanced HTTP request smuggling techniques and new desync attack classes that bypass modern mitigations, featuring real-world exploits and open-source research tools.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Making a Custom Hashcat Module to Solve a Decade-Old Puzzle Challenge

Discover how to create custom Hashcat modules for cracking complex puzzles, featuring the decade-old One Bitcoin Book challenge solved through GPU-powered brute force techniques.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

SCCM - The Tree That Always Bears Bad Fruits

Explore SCCM security vulnerabilities and attack techniques, including 0-day exploits like CVE-2024-43468, reconnaissance methods, and post-exploitation tools for red team operations.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Emulating Embedded Linux Devices at Scale with LightTouch Firmware Rehosting

Discover advanced techniques for emulating embedded Linux systems using a higher-level rehosting approach that preserves userspace integrity while building custom kernels and QEMU machines.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

State of Open Source in the Federal Government

Discover the current landscape of open source adoption in federal agencies, exploring challenges, reforms, and policy strategies from a government IT insider's perspective.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Rebadged, Relabeled, Rooted - Pwnage via Solar Supply Chain

Uncover critical security vulnerabilities in residential solar systems through supply chain attacks, API exploitation, and firmware tampering techniques.

• YouTube
• 33 minutes
• Self-Paced
• Free Video