DEFCONConference Courses

How Extra Features In Contactless Payments Break Security, What We Can Do

Discover how additional features in contactless payment systems create security vulnerabilities and learn practical solutions to protect against these threats.

• YouTube
• 35 minutes
• On-Demand
• Free Video

The Ghost of Internet Explorer in Windows

Uncover how Microsoft's MapUrlToZone API vulnerabilities allowed attackers to bypass Windows security by disguising remote files as local, leading to a dozen CVEs fixed in 2025.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Access to Secure Dependency Management Everywhere with Nix

Discover how Nix and NixOS revolutionize software deployment, eliminate vendor lock-in, and enable secure self-hosting of 120,000 Linux packages for ultimate control.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Infecting the Boot to Own the Kernel - UEFI Bootkits and Kernel-mode Rootkits

Explore UEFI bootkits and kernel rootkits construction, examining modular design, boot chain hooking, and advanced stealth capabilities with a complete framework for testing defenses.

• YouTube
• 39 minutes
• On-Demand
• Free Video

The Anatomy of a Crypto Scam

Uncover how crypto scammers operate through real case analysis, fund tracking, and learn essential defense strategies to protect yourself from sophisticated financial fraud schemes.

• YouTube
• 56 minutes
• On-Demand
• Free Video

CTRAPS - CTAP Impersonation and API Confusion Attacks on FIDO2

Uncover critical FIDO2 vulnerabilities through CTRAPS attacks that exploit CTAP protocol weaknesses, enabling credential wiping, unauthorized resets, and user tracking on popular authenticators.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Game Hacking 101

Discover fundamental game hacking concepts and security principles in video games through practical examples and hands-on techniques.

• YouTube
• 40 minutes
• On-Demand
• Free Video

All Your Keyboards Are Belong to Us - Keyboard Attack Vectors and Security Vulnerabilities

Explore keyboard hacking techniques from keyloggers to Van Eck phreaking, RF attacks, and acoustic eavesdropping to capture plaintext before encryption in this live tutorial.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Mac PRT Cookie Theft and Entra ID Persistence

Uncover macOS PRT cookie extraction techniques and Entra ID persistence methods, comparing Windows/macOS security controls and demonstrating novel device registration attacks.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Scamming Scammers - Weaponizing OSS Against Pig Butchering, Organized Crime

Discover how to weaponize open-source tools against $75B pig butchering scams and fight transnational crime syndicates exploiting trafficking victims through military-grade psychological ops.

• YouTube
• 54 minutes
• On-Demand
• Free Video

7 Vulns in 7 Days - Breaking Bloatware Faster Than It's Built

Discover how bloatware vulnerabilities led to 7 CVEs in 7 days, exposing privileged service flaws that enable browser-to-system exploitation across major vendors.

• YouTube
• 40 minutes
• On-Demand
• Free Video

SSH Honeypots and Walkthrough Workshops - A History

Explore the evolution of SSH honeypots from DEF CON 24's puzzle to advanced Cowrie-based challenges featuring custom commands, adventure games, and innovative terminal interactions.

• YouTube
• 35 minutes
• On-Demand
• Free Video

How Malicious Packages on npm Bypass Existing Security Tools

Uncover how threat actors exploit npm's 5 million packages to deliver malware and why traditional security tools like SCA, SAST, and EDR fail to detect these npm-based attacks.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Not Just a Pipeline Leak - Reconstructing Real Attack Behind tj-actions

Uncover the sophisticated supply chain attack behind the tj-actions incident, revealing how attackers weaponized open-source trust to target Coinbase through lateral movement.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Fingerprint-Based Bot Blocking and Dynamic Deception

Discover how to build a self-evolving firewall using TLS/HTTP fingerprints and AI to block bots and create dynamic deception traps that adapt in real-time.

• YouTube
• 43 minutes
• On-Demand
• Free Video