DEFCONConference Courses

Client or Server? Hidden Sword of Damocles in Kafka

Discover the first-ever RCE vulnerability in Kafka Server and ecosystem components, exposing thousands of servers to hidden security threats in this groundbreaking research.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Red Teaming Fraud Prevention Systems with GenAI

Explore how LLMs can red team fraud prevention systems, testing resilience against innovative fraudster attacks using generative AI techniques.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Amber64 - Mining Hacker History from Over 500k Commodore 64 Disks

Discover how forensic analysis of 650,000 Commodore 64 disk images reveals hidden hacker history from the 1980s-90s through recovered deleted files and unallocated sectors.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Mastering Apple Endpoint Security for Advanced macOS Malware Detection

Unlock advanced Apple Endpoint Security features for sophisticated macOS malware detection, covering caching behaviors, authorization deadlines, mute inversions, and TCC event monitoring.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

TSPU - Russia's Firewall and Defending Against Digital Repression

Explore Russia's TSPU censorship system, its advanced in-path filtering capabilities, and emerging circumvention techniques to defend against digital repression.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Cyber Volunteering and Community Defense - 1 Year In

Discover how hackers and technologists protect communities through cyber volunteering, ransomware response, and grassroots defense initiatives in this DEF CON update.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Breaking Wi-Fi Easy Connect - A Security Analysis of DPP

Uncover critical security vulnerabilities in Wi-Fi Easy Connect protocol through comprehensive analysis revealing how usability enhancements can compromise network security.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

AppleStorm - Unmasking the Privacy Risks of Apple Intelligence

Uncover the hidden privacy risks and data flows within Apple Intelligence through traffic analysis and OS inspection techniques, challenging Apple's security claims.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Third Party Access Granted - Postmortem on Student Privacy

Explore student data privacy vulnerabilities and third-party access risks in higher education systems through real-world case analysis and security insights.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Remote Code Execution via MIDI Messages

Discover how to exploit MIDI protocol vulnerabilities in Yamaha keyboards through hardware reverse engineering, JTAG, UART, and firmware analysis to achieve remote code execution.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Satellite Networks Under Siege - Cybersecurity Challenges of Targeted DDoS Attacks

Explore satellite network vulnerabilities and DDoS attack methodologies targeting Low Earth Orbit constellations, plus defensive countermeasures for critical space communications.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Secure Code Is Critical Infrastructure - Hacking Policy for Public Good

Discover how secure coding practices can be leveraged as critical infrastructure to influence policy changes and create positive societal impact through cybersecurity advocacy.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Man in the Malware - Intercepting Adversarial Communications

Discover how a threat actor's OPSEC mistake exposed their entire cybercrime operation through intercepted Telegram C2 communications, revealing malware tactics and infrastructure mapping.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Kill List - Hacking an Assassination Site on the Dark Web

Discover how security researchers exposed a dark web assassination marketplace, intercepted murder orders, and collaborated with global law enforcement to prevent killings and secure convictions.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Letthemin - Facilitating High Value Purple Teams Using Assumed Compromise

Master a refined methodology for Purple Team engagements using Assumed Compromise approach to enhance detection capabilities and organizational cyber resilience.

• YouTube
• 28 minutes
• Self-Paced
• Free Video