DEFCONConference Courses

Abusing OIDC Authentication for Cloud Security Vulnerabilities

Dive into OIDC security vulnerabilities, exploring authentication mechanisms, potential misconfigurations, and real-world attack vectors in cloud environments through CI/CD workflows and identity providers.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Web2 Meets Web3: Hacking Decentralized Applications

Dive into the security challenges of decentralized applications, exploring real-world vulnerabilities, threat modeling, and attack vectors in both Web2 and blockchain environments.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Xiaomi Mobile Security Vulnerabilities - Regional Exploit Analysis and Pwn2Own Competition

Delve into the behind-the-scenes journey of exploiting Xiaomi 13 Pro at Pwn2Own Toronto 2023, exploring regional security variations and the challenges of mobile device exploitation.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

A New Side Channel Attack on AI Assistants - Exploiting Vulnerabilities in Encrypted Messages

Uncover a critical side-channel vulnerability affecting AI assistants like ChatGPT, exploring how encrypted conversations can be intercepted and the broader implications for privacy and security.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

V2GEvil: Cybersecurity Vulnerabilities in Electric Vehicle Charging Systems

Explore critical vulnerabilities in electric vehicle charging systems and learn specialized security testing techniques for EVCC and ISO 15118 protocols in charging infrastructure.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

XR Accessibility and Privacy Challenges for Disabled Users

Explore the critical intersection of XR technology, accessibility, and privacy concerns for disabled users, examining key challenges and solutions for creating inclusive virtual experiences.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Open Sesame - Vulnerabilities in Electronic Smart Lockers and Cabinets

Explore physical and side-channel vulnerabilities in electronic smart locks, focusing on PIN and RFID security risks in organizational locker systems and shared spaces.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Detecting Persistent Threats on Draytek Devices - Security Assessment and Mitigation Tools

Discover how to detect and mitigate persistent threats on Draytek devices through firmware analysis, reverse engineering, and custom security module development for enhanced network protection.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Outlook Unleashing RCE Chaos: Understanding CVE-2024-30103

Dive into the critical Outlook security vulnerabilities, exploring RCE exploits through COM objects, NTLM leaks, and essential mitigation strategies for enterprise protection.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Securing Frontends at Scale - Paving the Way to Post-XSS World

Discover cutting-edge strategies for defending against XSS vulnerabilities, exploring Google's proven security implementations and future-focused approaches for protecting web applications at scale.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

RFID 101: Understanding Badge Systems, Readers, and Security Exploits

Discover the fundamentals of RFID technology, badge cloning, and security system vulnerabilities using tools like Proxmark and Flipper, while learning practical wireless communication hacking techniques.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Signature-Based Detection Using Network Timing - Malware Traffic Analysis

Explore advanced malware detection techniques using network timing patterns and Python, learning to identify malicious behavior through transaction intervals rather than traditional code signatures.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

QuickShell: Remote Code Execution Attack Chain Analysis in Quick Share

Uncover critical security vulnerabilities in Google's Quick Share protocol, including an RCE attack chain, HTTPS MITM techniques, and protocol analysis for both Windows and Android platforms.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Reflections on a Decade in Bug Bounties - From Novice to Seasoned Hunter

Gain insights into the evolution of bug bounty hunting through a decade-long journey, from basic vulnerability reporting to crafting critical impact chains, with perspectives from both hunter and triage sides.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Reverse Engineering MicroPython Frozen Modules

Dive into advanced techniques for identifying and reverse engineering frozen MicroPython modules in firmware using Ghidra, focusing on bytecode analysis and module reconstruction methods.

• YouTube
• 43 minutes
• Self-Paced
• Free Video