DEFCONConference Courses

Deepfake Image and Video Detection

Explore methods for identifying AI-generated, photoshopped, and GAN-created deepfakes through live demonstrations of over a dozen detection techniques and free analysis tools.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Gateways to Chaos - How We Proved Modems Are a Ticking Time Bomb

Uncover critical vulnerabilities in ISP modems threatening global infrastructure, learn detection techniques, and develop defenses against systemic security failures.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

New Red Team Networking Techniques for Initial Access and Evasion

Discover advanced red team networking techniques using stateless tunnels like GRE and VxLAN for initial access without phishing, plus evasion methods and VxLAN vulnerabilities.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Hacker vs. Triage - Inside Bug Bounty Battleground

Explore the dynamics between security researchers and vulnerability triagers in bug bounty programs, learning strategies for better communication, dispute resolution, and collaboration.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Go Malware Meets IoT - Challenges, Blind Spots, and Botnets

Explore Go malware analysis challenges in IoT environments, learn practical reverse engineering techniques, and examine the Pumabot botnet case study.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Turning Microsoft's Login Page into Phishing Infrastructure

Discover novel methods to exploit Microsoft's legitimate login domain for phishing attacks using unpatchable functionality in this DEF CON security research presentation.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Journey to the Center of PSTN - I Became a Phone Company. You Should Too

Discover how to become a phone company by demystifying PSTN networks, regulatory structures, exploits, and the complete process of forming a local exchange carrier.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Bypassing Intent Destination Checks - LaunchAnyWhere Privilege Escalation

Discover how the LaunchAnywhere Android vulnerability persists despite patches, using BadResolve technique to bypass intent destination checks and achieve privilege escalation.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Threat Dynamics on the Seas

Explore maritime cybersecurity threats from port cranes to undersea cables with national security experts discussing surveillance, power projection, and digital age conflicts at sea.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Dark Capabilities - When Tech Companies Become Threat Actors

Explore how tech companies wield dangerous hidden powers beyond user awareness, from data scanning to system control, and learn to recognize potential threats in modern platforms.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Thinking Like a Hacker in the Age of AI

Explore how AI creates complex meta-systems that shape reality beyond our control, requiring collaborative hacker mindsets to think critically and systematically navigate this new landscape.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Automated Unpacking and Deobfuscation of Nested VM-Based Protectors

Discover DragonSlayer, an automated framework using symbolic execution and dynamic taint tracking to unpack nested VM-based protectors, reducing analysis time from weeks to hours.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

AutoDetection and Exploitation of DOM Clobbering Vulnerabilities at Scale

Discover DOM Clobbering attack techniques and automated detection methods using Hulk tool, revealing 497 zero-day vulnerabilities across top websites and popular libraries.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Elevators 101 - Security Design and Bypass Techniques

Discover elevator security vulnerabilities and bypass techniques including floor lockouts, controller manipulation, and hoistway entry methods for physical security assessments.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

LLM Identifies Info Stealer Vector and Extracts IoCs

Discover how LLMs analyze infostealer malware screenshots to identify infection vectors and extract IoCs from 30+ million stealer logs, revealing cybercrime tactics at scale.

• YouTube
• 50 minutes
• Self-Paced
• Free Video