DEFCONConference Courses

Secret Life of Rogue Devices: Lost IT Assets on the Public Marketplace

Uncover the alarming journey of lost corporate devices in public markets through data scraping, OCR clusters, reverse engineering, and conversations with underground collectors.

• YouTube
• 30 minutes
• On-Demand
• Free Video

The Way to Android Root: Exploiting Smartphone GPU

Dive into advanced Android security research exploring Qualcomm Adreno GPU vulnerabilities, exploitation techniques, and kernel-level attacks to achieve root access, with practical mitigation strategies.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Dysfunctional Unity: Medical Device Security and Hospital Network Vulnerabilities

Explore critical vulnerabilities in medical devices and hospital networks, examining security challenges, SBOM misconceptions, and strategies for creating more secure healthcare environments.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Hacking Norwegian Banks Through Paper-Based Identity Theft

Uncover shocking vulnerabilities in Norwegian banking systems through real-world examples of identity theft and unauthorized access, revealing critical lessons about paper-based security flaws.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Exploiting Bluetooth Vulnerabilities: From Vehicle Systems to Bank Account Access

Discover how to identify and exploit Bluetooth vulnerabilities in modern vehicle systems using BlueToolkit, exploring real-world security implications and practical attack vectors in automotive and aviation contexts.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Differential Privacy Beyond Algorithm: Challenges for Deployment

Explore the practical challenges of implementing differential privacy systems, from explaining technical guarantees to non-experts to preventing misuse and integrating with existing security tools.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Hacking Millions of Modems and Investigating Modem Security Vulnerabilities

Dive into a real-world investigation of modem vulnerabilities, ISP security flaws, and the concerning centralization of broadband infrastructure through a personal hacking incident analysis.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Efficient Bug Bounty Automation Techniques for Time and Resource Optimization

Master efficient bug bounty automation techniques to enhance hunting speed, bypass limitations, and maximize earnings through strategic tools and methodologies for finding vulnerabilities first.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Finding Zero-Day Vulnerabilities in Vilo Home Routers - Security Research Process and Discoveries

Discover how student researchers uncovered 9 zero-day vulnerabilities in Vilo routers through hardware hacking, firmware analysis, and cloud infrastructure investigation, highlighting IoT security challenges.

• YouTube
• 28 minutes
• On-Demand
• Free Video

No Symbols When Reversing? No Problem - Bring Your Own Symbols for Binary Analysis

Discover efficient techniques for analyzing unknown functions in binaries, focusing on portable symbol creation and management using Ghidra, with practical examples from Golang-based malware analysis.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Finding and Exploiting Local Security Vulnerabilities in 1Password for MacOS

Explore critical security vulnerabilities in 1Password's MacOS app, including local vault exploitation, IPC weaknesses, and Chrome extension flaws that could compromise password security.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Grand Theft Actions - Abusing Self-Hosted GitHub Runners for Supply Chain Attacks

Dive into critical security vulnerabilities in GitHub Actions, exploring real-world attacks on self-hosted runners and learning how to prevent supply chain compromises in major open-source projects.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Developing a Low-Cost Raspberry Pi Device for ADS-B Spoofing Detection

Discover how to build Fly Catcher, a Raspberry Pi-based device using neural networks to detect spoofed aircraft signals through ADS-B monitoring and analysis in real-time.

• YouTube
• 20 minutes
• On-Demand
• Free Video

From Theory to Reality: Demonstrating SPARTA Techniques Through Ground Infrastructure Attacks

Discover how to exploit space mission vulnerabilities through ground infrastructure attacks, focusing on SPARTA techniques and man-in-the-middle exploits for spacecraft communications.

• YouTube
• 25 minutes
• On-Demand
• Free Video

NTLM Authentication Vulnerabilities and Exploits - A Final Analysis

Dive into critical NTLM authentication vulnerabilities, exploring new bugs, bypass techniques, and security control gaps in Windows systems before Microsoft phases out this protocol.

• YouTube
• 33 minutes
• On-Demand
• Free Video