DEFCONConference Courses

Analyzing Science Fiction Hacking vs Real-World Cyber Attacks - A Comparative Study

Explore the fascinating relationship between science fiction and real-world hacking through analysis of 200 fictional and 800 real cyberattacks, revealing predictive patterns and societal impacts.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Securing Critical Versions of Your Reality - Extended Reality in Critical Infrastructure

Explore how Extended Reality (XR) technology impacts critical infrastructure security and operations through expert insights on implementation, risks, and protective measures.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Retro Exploitation - Vintage Computing as a Vulnerability Research Playground

Explore vulnerability research and exploit development through vintage computing, focusing on the Commodore Amiga platform and practical demonstrations of retro software exploitation techniques.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

The Importance of Arts and Crafts in ThreatOps - Effective Visual Communication for Cybersecurity Analysis

Master effective visualization techniques for cybersecurity incidents and threat intelligence, enhancing your ability to communicate complex security concepts through clear, standardized diagrams.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Private Keys in Public Places - Finding and Exploiting Hidden Encryption Keys

Uncover techniques for finding hidden private keys, certificates, and encryption keys in firmware, with real-world examples from Netgear, Fortinet, and Dell's security vulnerabilities.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Video-Based Cryptanalysis: Extracting Keys from Power LEDs

Discover how power LED brightness variations in devices can be exploited through video footage to extract cryptographic keys, with demonstrations using smartcard readers and USB speakers.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Real-Time Video and Audio Deep Fake Impersonation - A Security Demonstration

Explore real-time deepfake technology and its potential security risks through practical demonstrations of CEO impersonation using open-source tools and accessible hardware.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Prototype Pollution Leading to Remote Code Execution in NodeJS

Delve into prototype pollution vulnerabilities in Node.js, exploring how they enable remote code execution, analyzing real-world exploits, and understanding recent security mitigations.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Game Changing Advances in Windows Shellcode Analysis Using SHAREM Framework

Discover groundbreaking advances in Windows shellcode analysis through SHAREM framework, offering enhanced emulation, complete code coverage, and superior disassembly capabilities for security professionals.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Weaponizing Plain Text ANSI Escape Sequences - A Forensic Nightmare

Explore how ANSI escape sequences can be weaponized to compromise log files, and learn essential prevention techniques for securing modern application logging systems and forensic investigations.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Physical Attacks Against Smartphones: Android Security Vulnerabilities and Exploits

Discover physical attack vulnerabilities in Android smartphones, from Recovery mode exploits using SD cards to USB stack weaknesses in secondary bootloaders for achieving root access and code execution.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Unparalleled RDP Monitoring to Reveal Attackers' Tradecraft

Dive into advanced RDP attack monitoring techniques and threat actor behaviors through a unique D&D-themed analysis of cybersecurity tradecraft and defensive strategies.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Smashing the State Machine: Advanced Web Race Condition Attacks

Discover advanced web race-condition attack techniques, from limit-overrun exploits to state machine manipulation, with practical methodologies and tools for identifying and exploiting vulnerabilities.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Growing the Community of AI Hackers with Generative Red Team Testing

Dive into the groundbreaking world of AI security testing, exploring red team methodologies, algorithmic bounties, and practical strategies for evaluating Large Language Models beyond basic exploits.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

An Audacious Plan to Halt the Internet's Enshittification

Explore how internet platforms evolve from user-friendly to exploitative, and discover practical solutions including antitrust measures, privacy laws, and user empowerment tools to combat digital degradation.

• YouTube
• 46 minutes
• Self-Paced
• Free Video