DEFCONConference Courses

VDA Shenanigans: Attacking and Defending Vehicle Diagnostics Adapters

Dive into vehicle diagnostics adapter security through hardware reverse engineering, firmware analysis, and defensive strategies for automotive systems protection.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Jailbreaking TETRA Digital Radios and Base Stations - Security Analysis and Vulnerabilities

Dive into reverse engineering TETRA radio systems, uncovering cryptographic vulnerabilities, exploiting security flaws, and gaining control of Motorola MTM5x00 radios and base stations through practical demonstrations.

• YouTube
• 1 hour 10 minutes
• Self-Paced
• Free Video

What 10 Years of Drive Stats Data Can Tell Us

Discover fascinating insights from a decade-long analysis of hard drive reliability data, exploring failure patterns, longevity trends, and critical factors affecting storage performance.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

WINE Pairing with Malware - Using Linux Tools for Malware Analysis

Discover how to leverage WINE and Linux tools for malware analysis, extracting forensic evidence, and testing offensive security techniques without expensive sandboxes.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Malware Design: Abusing Legacy Microsoft Transports and Session Architecture

Explore advanced malware design techniques and covert communication frameworks, focusing on Windows architecture exploitation and maintaining persistent access while evading detection systems.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Runtime Riddles: Abusing Manipulation Points in the Android Source

Delve into advanced Android runtime manipulation techniques for bypassing decompilers and emulators, featuring practical demonstrations of native C++ manipulators and custom library implementation.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Revolutionizing ELF Binary Patching with Shiva - Advanced Techniques and Solutions

Discover revolutionary ELF binary patching with Shiva - a JIT system enabling developers to write complex patches in C code, transforming how we maintain and secure legacy software without source code access.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

LLMs at the Forefront - Pioneering the Future of Fuzz Testing

Explore how Large Language Models revolutionize fuzz testing in cybersecurity, featuring FuzzForest tool demonstrations and practical applications for automated security assessments.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

StackMoonwalk: Advanced Memory Evasion Techniques Through Call Stack Tampering

Delve into advanced memory evasion techniques for cybersecurity, exploring novel "Full Moon" and "Half Moon" approaches to call stack tampering, plus learn detection methods using the Eclipse algorithm.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Unlocking Hidden Powers in Xtensa-based Qualcomm WiFi Chips

Dive into firmware modification techniques for Xtensa-based Qualcomm WiFi chips, exploring architecture, patching methods, and security research possibilities using the Nexmon framework.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Private Until Presumed Guilty - Digital Privacy and Law Enforcement Surveillance

Explore how law enforcement leverages personal data from phones and apps for investigations, focusing on privacy implications, forensic tools, and legal protections in the digital age.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Turning Virtual Wallets into Skimming Devices - Security Vulnerabilities in MPOS Solutions

Uncover security vulnerabilities in mobile payment systems and MPOS devices, exploring real-world examples of credit card skimming, Bluetooth tampering, and hardware exploitation techniques.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Breaking Microsoft Teams and SharePoint Through Migration APIs

Uncover critical security vulnerabilities in Microsoft SharePoint Online's migration APIs and learn how threat actors can exploit these features to compromise Microsoft 365 services and Azure Active Directory.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Polynonce: A Novel ECDSA Attack and Vulnerability Analysis

Explore a novel ECDSA digital signature vulnerability through real-world examples in Bitcoin and Ethereum networks, including attack implementation and security implications.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Mapping IDs and Monitoring User Presence in the Azure Ecosystem

Uncover powerful techniques for large-scale Azure user enumeration, focusing on OneDrive, Teams, and Graph vulnerabilities to map organizational relationships and monitor user presence without authentication.

• YouTube
• 32 minutes
• Self-Paced
• Free Video