DEFCONConference Courses

Attacks on GenAI Data and Using Vector Encryption for Protection

Explore cutting-edge vector encryption techniques and security measures to protect GenAI data from embedding inversion attacks while enabling privacy-preserving searches over encrypted vectors.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Behind Enemy Lines: Engaging and Disrupting Ransomware Web Panels

Dive into advanced strategies for infiltrating and disrupting ransomware operations by targeting their web panels, APIs, and command centers while gathering vital intelligence on threat actors.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Hacker vs AI Perspectives in National Security and Cyber Warfare

Explore AI's role in national security through an ex-spy's lens, blending pop culture references with real-world cybersecurity insights and interactive demonstrations of AI systems.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

The Art of Hacking Transportation Systems - Exploring Security Vulnerabilities

Dive into the fascinating world of transportation security vulnerabilities and hacking methodologies with expert insights on protecting critical infrastructure and mobility systems.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

From Easy Wins to Epic Challenges: Bug Bounty Hunting Journey

Dive into real-world bug bounty hunting experiences, from simple vulnerabilities to complex exploit chains, featuring fascinating discoveries like infinite money glitches and CAPTCHA-based encryption breaks.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Time-Based SQL Injection Techniques and Defense Strategies

Dive into time-based SQL injection techniques through Operation GhostShell, featuring live demos and defense strategies for protecting against sophisticated database vulnerabilities.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Understanding Modern Military Adversarial Philosophy - Beyond Sun Tzu

Uncover insights into adversarial military philosophy taught in Chinese and Russian academies through an NSA veteran's analysis of cybersecurity strategy and information warfare challenges.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Incubated ML Exploits: Backdooring Machine Learning Pipelines with Input Handling Bugs

Explore machine learning pipeline vulnerabilities and learn to identify, exploit, and defend against model backdoors through input handling bugs and systematic security approaches.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Beginner's Guide to Hacking IoT Devices - Building Your First IoT Security Testing Lab

Discover practical IoT hacking techniques, from selecting beginner-friendly devices to building an affordable toolkit under $100. Learn common vulnerabilities and methods to gain device access using simple tools and tactics.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

HookChain: A New Perspective for Bypassing EDR Solutions

Discover a sophisticated EDR bypass technique combining IAT Hooking, dynamic SSN resolution, and indirect system calls to redirect Windows subsystem execution flow while remaining undetected by traditional security measures.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Travel Better: Expedient Digital Defense for Modern Travelers

Discover essential digital defense strategies for travel, focusing on free tools and OPSEC principles to protect your online presence and personal data while maintaining security awareness.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Simulating Attacks Against Hydroelectric Power Plants Using ICS Firing Range

Dive into a comprehensive simulation of cyberattacks on hydroelectric facilities, exploring both offensive tactics and defensive strategies through a custom-built ICS firing range environment.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

BOLABuster - Harnessing LLMs for Automating BOLA Detection

Discover how to leverage LLMs for automated BOLA vulnerability detection in APIs and web applications, exploring BOLABuster's innovative approach to identifying critical security risks at scale.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Kubernetes Attack Simulation - The Definitive Guide to Security Monitoring and Detection

Master Kubernetes security monitoring and attack simulation techniques for effective threat detection and defense in containerized environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

UDSonCAN Attacks - Discovering Safety Critical Risks by Fuzzing

Explore critical vehicle security vulnerabilities through UDSonCAN fuzzing techniques, revealing potential safety risks in diagnostic systems and their essential countermeasures for modern electric vehicles.

• YouTube
• 23 minutes
• Self-Paced
• Free Video