DEFCONConference Courses

Journey to the Center of PSTN - I Became a Phone Company. You Should Too

Discover how to become a phone company by demystifying PSTN networks, regulatory structures, exploits, and the complete process of forming a local exchange carrier.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Bypassing Intent Destination Checks - LaunchAnyWhere Privilege Escalation

Discover how the LaunchAnywhere Android vulnerability persists despite patches, using BadResolve technique to bypass intent destination checks and achieve privilege escalation.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Threat Dynamics on the Seas

Explore maritime cybersecurity threats from port cranes to undersea cables with national security experts discussing surveillance, power projection, and digital age conflicts at sea.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Dark Capabilities - When Tech Companies Become Threat Actors

Explore how tech companies wield dangerous hidden powers beyond user awareness, from data scanning to system control, and learn to recognize potential threats in modern platforms.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Thinking Like a Hacker in the Age of AI

Explore how AI creates complex meta-systems that shape reality beyond our control, requiring collaborative hacker mindsets to think critically and systematically navigate this new landscape.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Automated Unpacking and Deobfuscation of Nested VM-Based Protectors

Discover DragonSlayer, an automated framework using symbolic execution and dynamic taint tracking to unpack nested VM-based protectors, reducing analysis time from weeks to hours.

• YouTube
• 39 minutes
• On-Demand
• Free Video

AutoDetection and Exploitation of DOM Clobbering Vulnerabilities at Scale

Discover DOM Clobbering attack techniques and automated detection methods using Hulk tool, revealing 497 zero-day vulnerabilities across top websites and popular libraries.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Fighting a Digital Blockade - View from Taiwan

Explore Taiwan's frontline defense against digital warfare, undersea infrastructure sabotage, and cyber-resilience strategies in this high-profile panel discussion.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Elevators 101 - Security Design and Bypass Techniques

Discover elevator security vulnerabilities and bypass techniques including floor lockouts, controller manipulation, and hoistway entry methods for physical security assessments.

• YouTube
• 37 minutes
• On-Demand
• Free Video

LLM Identifies Info Stealer Vector and Extracts IoCs

Discover how LLMs analyze infostealer malware screenshots to identify infection vectors and extract IoCs from 30+ million stealer logs, revealing cybercrime tactics at scale.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Escaping the Privacy Sandbox - Client-side Deanonymization Attacks

Uncover client-side deanonymization attacks targeting Google's Privacy Sandbox APIs, exploring vulnerabilities in Attribution Reporting and Shared Storage that compromise user privacy.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Exploiting Vulnerabilities in EV Charging Communications

Uncover critical vulnerabilities in EV charging protocols, targeting QCA 7000 Homeplug modems used in CCS and NACS systems with real-world attack demonstrations.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Building Onramps for Emergency Web Archiving in Ukraine and Beyond

Discover how to build accessible emergency web archiving systems, drawing from SUCHO's work preserving Ukrainian cultural heritage during wartime and creating sustainable digital preservation methods.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Exploiting Security Side Channels in End-to-End Encrypted Messengers

Uncover critical vulnerabilities in WhatsApp and Signal that enable stealthy user tracking and security degradation through delivery receipts and Perfect Forward Secrecy attacks.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Regex for Hackers - Using Regular Expressions for Security Testing and Bug Bounty Hunting

Master regex techniques to uncover hidden vulnerabilities, bypass security filters, and automate reconnaissance that automated tools miss in this hands-on hacking workshop.

• YouTube
• 50 minutes
• On-Demand
• Free Video