DEFCONConference Courses

Simulating Attacks Against Hydroelectric Power Plants Using ICS Firing Range

Dive into a comprehensive simulation of cyberattacks on hydroelectric facilities, exploring both offensive tactics and defensive strategies through a custom-built ICS firing range environment.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

BOLABuster - Harnessing LLMs for Automating BOLA Detection

Discover how to leverage LLMs for automated BOLA vulnerability detection in APIs and web applications, exploring BOLABuster's innovative approach to identifying critical security risks at scale.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Kubernetes Attack Simulation - The Definitive Guide to Security Monitoring and Detection

Master Kubernetes security monitoring and attack simulation techniques for effective threat detection and defense in containerized environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

UDSonCAN Attacks - Discovering Safety Critical Risks by Fuzzing

Explore critical vehicle security vulnerabilities through UDSonCAN fuzzing techniques, revealing potential safety risks in diagnostic systems and their essential countermeasures for modern electric vehicles.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Abusing Legacy Railroad Signaling Systems - Security Vulnerabilities and Threats

Uncover critical vulnerabilities in railway signaling systems through an analysis of accessible hardware tools and their potential impact on train operations, with focus on Spanish infrastructure.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Building a Secure and Resilient Nationwide EV Charging Network

Explore cybersecurity challenges and policy considerations in the rapidly expanding EV charging infrastructure, focusing on vulnerability assessment and risk mitigation strategies.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Web Cache Exploitation: Advanced Techniques for Static Path Deception and Cache Key Confusion

Discover powerful web cache exploitation techniques, including Static Path Deception and Cache Key Confusion, to identify and exploit URL parsing vulnerabilities across major platforms like Azure Cloud and Cloudflare.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Bug Hunting in VMware Device Virtualization - Security Vulnerabilities and Attack Surfaces

Delve into VMware device virtualization security, exploring USB system vulnerabilities, SCSI device emulation, and VMKernel design flaws through real-world bug hunting experiences and discoveries.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

What History's Greatest Heist Can Teach Us About Defense in Depth

Explore the fascinating Antwerp Diamond Heist to understand defense-in-depth security principles through analysis of history's greatest vault breach and its modern cybersecurity implications.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Secret Life of Rogue Devices: Lost IT Assets on the Public Marketplace

Uncover the alarming journey of lost corporate devices in public markets through data scraping, OCR clusters, reverse engineering, and conversations with underground collectors.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

The Way to Android Root: Exploiting Smartphone GPU

Dive into advanced Android security research exploring Qualcomm Adreno GPU vulnerabilities, exploitation techniques, and kernel-level attacks to achieve root access, with practical mitigation strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Dysfunctional Unity: Medical Device Security and Hospital Network Vulnerabilities

Explore critical vulnerabilities in medical devices and hospital networks, examining security challenges, SBOM misconceptions, and strategies for creating more secure healthcare environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Hacking Norwegian Banks Through Paper-Based Identity Theft

Uncover shocking vulnerabilities in Norwegian banking systems through real-world examples of identity theft and unauthorized access, revealing critical lessons about paper-based security flaws.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Exploiting Bluetooth Vulnerabilities: From Vehicle Systems to Bank Account Access

Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicle systems using BlueToolkit, exploring real-world security implications and practical attack vectors in automotive and aviation contexts.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Differential Privacy Beyond Algorithm: Challenges for Deployment

Explore the practical challenges of implementing differential privacy systems, from explaining technical guarantees to non-experts to preventing misuse and integrating with existing security tools.

• YouTube
• 26 minutes
• Self-Paced
• Free Video