DEFCONConference Courses

Time-Based SQL Injection Techniques and Defense Strategies

Dive into time-based SQL injection techniques through Operation GhostShell, featuring live demos and defense strategies for protecting against sophisticated database vulnerabilities.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Understanding Modern Military Adversarial Philosophy - Beyond Sun Tzu

Uncover insights into adversarial military philosophy taught in Chinese and Russian academies through an NSA veteran's analysis of cybersecurity strategy and information warfare challenges.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Incubated ML Exploits: Backdooring Machine Learning Pipelines with Input Handling Bugs

Explore machine learning pipeline vulnerabilities and learn to identify, exploit, and defend against model backdoors through input handling bugs and systematic security approaches.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Beginner's Guide to Hacking IoT Devices - Building Your First IoT Security Testing Lab

Discover practical IoT hacking techniques, from selecting beginner-friendly devices to building an affordable toolkit under $100. Learn common vulnerabilities and methods to gain device access using simple tools and tactics.

• YouTube
• 54 minutes
• On-Demand
• Free Video

HookChain: A New Perspective for Bypassing EDR Solutions

Discover a sophisticated EDR bypass technique combining IAT Hooking, dynamic SSN resolution, and indirect system calls to redirect Windows subsystem execution flow while remaining undetected by traditional security measures.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Travel Better: Expedient Digital Defense for Modern Travelers

Discover essential digital defense strategies for travel, focusing on free tools and OPSEC principles to protect your online presence and personal data while maintaining security awareness.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Simulating Attacks Against Hydroelectric Power Plants Using ICS Firing Range

Dive into a comprehensive simulation of cyberattacks on hydroelectric facilities, exploring both offensive tactics and defensive strategies through a custom-built ICS firing range environment.

• YouTube
• 23 minutes
• On-Demand
• Free Video

BOLABuster - Harnessing LLMs for Automating BOLA Detection

Discover how to leverage LLMs for automated BOLA vulnerability detection in APIs and web applications, exploring BOLABuster's innovative approach to identifying critical security risks at scale.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Kubernetes Attack Simulation - The Definitive Guide to Security Monitoring and Detection

Master Kubernetes security monitoring and attack simulation techniques for effective threat detection and defense in containerized environments.

• YouTube
• 27 minutes
• On-Demand
• Free Video

UDSonCAN Attacks - Discovering Safety Critical Risks by Fuzzing

Explore critical vehicle security vulnerabilities through UDSonCAN fuzzing techniques, revealing potential safety risks in diagnostic systems and their essential countermeasures for modern electric vehicles.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Abusing Legacy Railroad Signaling Systems - Security Vulnerabilities and Threats

Uncover critical vulnerabilities in railway signaling systems through an analysis of accessible hardware tools and their potential impact on train operations, with focus on Spanish infrastructure.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Building a Secure and Resilient Nationwide EV Charging Network

Explore cybersecurity challenges and policy considerations in the rapidly expanding EV charging infrastructure, focusing on vulnerability assessment and risk mitigation strategies.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Web Cache Exploitation: Advanced Techniques for Static Path Deception and Cache Key Confusion

Discover powerful web cache exploitation techniques, including Static Path Deception and Cache Key Confusion, to identify and exploit URL parsing vulnerabilities across major platforms like Azure Cloud and Cloudflare.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Bug Hunting in VMware Device Virtualization - Security Vulnerabilities and Attack Surfaces

Delve into VMware device virtualization security, exploring USB system vulnerabilities, SCSI device emulation, and VMKernel design flaws through real-world bug hunting experiences and discoveries.

• YouTube
• 39 minutes
• On-Demand
• Free Video

What History's Greatest Heist Can Teach Us About Defense in Depth

Explore the fascinating Antwerp Diamond Heist to understand defense-in-depth security principles through analysis of history's greatest vault breach and its modern cybersecurity implications.

• YouTube
• 30 minutes
• On-Demand
• Free Video