DEFCONConference Courses

Firmware Decryption - For, and By, the Cryptographically Illiterate

Discover how to decrypt embedded device firmware using practical techniques, even without deep cryptographic knowledge or specialized hardware access.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Take All My Money - Penetrating ATMs

Discover real-world ATM hacking techniques, penetration testing war stories, and cybersecurity vulnerabilities that can make machines dispense cash unexpectedly.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Escaping the Privacy Sandbox with Client Side Deanonymization Attacks

Uncover client-side deanonymization attacks that exploit Google's Privacy Sandbox APIs, revealing how debugging reports, destination hijacking, and storage vulnerabilities can compromise user privacy.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Inside Look at a Chinese Operational Relay Network

Uncover how Chinese hackers build private relay networks to hide their tracks, exposing their tools, techniques, and infrastructure through detailed forensic analysis.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Locked Down, Not Locked Out - How I Escaped Your Secure Operator Workstation

Discover how to exploit and defend against common vulnerabilities in "locked down" operator workstations through real-world penetration testing scenarios and practical hardening techniques.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

China's Health Sector Ambitions and Info Needs

Discover China's healthcare sector strategic goals and intelligence requirements through expert analysis of technological ambitions and information gathering patterns.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Reconfigurable HSMs - Future Proofing Hardware Security

Explore reconfigurable HSMs built on FPGA technology that adapt to cryptographic changes without hardware replacement, overcoming traditional HSM rigidity limitations.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

How to Fake a Badge like a Pro - Counterfeiting Event Credentials

Discover counterfeiting techniques for event credentials through social engineering, arts & crafts, and observation to defeat security measures like UV ink and holograms.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

How AI and Hardware can Transform Point of Care Workflows

Discover how AI-powered hardware revolutionizes medical workflows with on-device LLMs, custom boards, and portable inference for bedside clinical decision-making.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

What's Really in the Box? The Case for Hardware Provenance and HBOMs

Explore hardware supply chain transparency through HBOMs, uncovering hidden risks in semiconductor provenance and developing tools for better hardware security accountability.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Hacking the Nautical Rules of the Road - Turn Left for Global Pwnage

Explore maritime cybersecurity through nautical rules of the road, focusing on why cyber manipulation of port turns poses greater risks than starboard maneuvers in vessel collisions.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

10 Years of IoT Village - Insights in the World of IoT Security

Explore 10 years of IoT security evolution with industry experts discussing lessons learned and current state of IoT security at DEF CON's IoT Village.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Sometimes You Find Bugs, Sometimes Bugs Find You

Discover the serendipitous side of bug bounty hunting through real-world examples of unexpected vulnerabilities that found the hunter, not the other way around.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Fingerprinting Maritime NMEA2000 Networks

Explore maritime cybersecurity by analyzing NMEA2000 networks, developing sensor fingerprints, and understanding vessel control system vulnerabilities through hands-on research.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Investigating Threat Actor Targeting Researchers and Academics

Uncover how threat actor MUT-1244 targets security researchers through trojanized exploits and fake GitHub profiles, plus learn detection methods and attribution techniques.

• YouTube
• 36 minutes
• Self-Paced
• Free Video