DEFCONConference Courses

Sudos and Sudon'ts - Peering Inside Sudo for Windows

Delve into Windows security mechanisms through an analysis of Sudo for Windows, exploring process elevation, ALPC services, and Rust-Windows API interactions while uncovering potential security vulnerabilities.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Speed Bumps and Speed Hacks - Adventures in Car Manufacturing Security

Dive into critical security vulnerabilities affecting major car manufacturers' web applications, exploring real-world attacks, impact chains, and the importance of responsible disclosure policies.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Process Injection Attacks with Return-Oriented Programming - Advanced Techniques and Methodologies

Discover advanced process injection techniques using return-oriented programming (ROP), including unique string comparison solutions, multiple WinAPI patterns, and practical methodologies for reliable implementation.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Vehicle-to-Game: Using Your Car as a Game Controller

Discover how to transform your car into a unique game controller using Python, exploring vehicle networks, CAN bus communication, and diagnostic interfaces for an innovative gaming experience.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Spies and Bytes: Victory in the Digital Age

Delve into modern cyber warfare insights from General Nakasone's leadership at NSA and U.S. Cyber Command, exploring national security strategies, threat responses, and the future of digital conflict.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Manipulating Shim and Office Infrastructure for Code Injection and Privilege Escalation

Delve into advanced Windows exploitation techniques, focusing on stealthy shim manipulation and Office infrastructure vulnerabilities for code injection and privilege escalation attacks.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

The Hack, the Crash and Two Smoking Barrels - Automotive Cybersecurity Challenges

Dive into automotive cybersecurity challenges through real-world stories and demonstrations, exploring vehicle architecture vulnerabilities and industry practices while witnessing live ECU hacking and security testing scenarios.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls

Discover techniques for exploiting email address parsing vulnerabilities to bypass security controls, spoof domains, and access protected systems through RFC-compliant manipulation.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Practical Exploitation of DoS in Bug Bounty Programs

Discover practical techniques for identifying and exploiting DoS vulnerabilities in bug bounty programs, covering N+1 errors, GraphQL crashing, and Cache Poisoning with real-world examples and responsible reporting practices.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

The Darkest Side of Bug Bounty - Understanding Problems and Solutions in Bug Bounty Programs

Uncover the hidden challenges, secrets, and realities of bug bounty programs through expert insights on navigating relationships between hunters, clients, and platforms.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level

Explore advanced SQL injection techniques through protocol-level query smuggling, revealing how attackers can bypass security measures and exploit database connections for authentication breaches and data theft.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Generating Software Bill of Materials Through Hardware Hacking - A Case Study of Bob the Minion Router

Dive into hardware hacking techniques for extracting firmware and generating Software Bill of Materials (SBOM) from a WiFi router, exploring vulnerability discovery through practical disassembly methods.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

The Immortal Retrofuturism of Mainframes and Their Security - Modern Applications and Protection

Explore the enduring relevance of mainframe technology, its modern applications, and essential security measures for protecting these powerful computing systems in today's digital landscape.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

How to Make Electronic Conference Badges - From Ideation to Production

Discover the complete badge-making journey, from creative concept to mass production, including circuit design, firmware development, and practical manufacturing insights.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Navigating a Secure Clean Energy Transition - Cybersecurity Challenges and Solutions

Explore the cybersecurity challenges and policy implications of clean energy adoption, focusing on supply chain vulnerabilities, security strategies, and balancing economic pressures with sustainability goals.

• YouTube
• 31 minutes
• Self-Paced
• Free Video