DEFCONConference Courses

Hacking Context for Auto Root Cause and Attack Flow Discovery

Discover lightweight, LLM-free techniques for contextualizing IoT alerts and building causality sequences to identify root causes and attack flows in resource-constrained environments.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Free Video

Cash, Drugs, and Guns - Why Your Safes Aren't Safe

Discover critical vulnerabilities in SecuRam safe locks used by Liberty Safe and major retailers, revealing how UL-certified electronic locks can be cracked in seconds using a Raspberry Pi.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Invoking Gemini Agents with a Google Calendar Invite

Uncover how attackers exploit Gemini agents through calendar invites, demonstrating 15 hijacking techniques that enable toxic content generation, device control, and data exfiltration.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Preventing One of The Largest Supply-Chain Attacks in History

Discover how abandoned AWS S3 buckets could enable massive supply-chain attacks affecting thousands of organizations worldwide and learn prevention strategies.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Kill Chain Reloaded - Abuse Legacy Paths for Stealth Persistence

Discover advanced Red Team techniques for bypassing EDR solutions through physical memory access and achieving kernel-mode execution with stealthy persistence methods.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Private, Private, Private - Access Everywhere

Discover OSINT techniques to assess your digital footprint and learn obfuscation methods to enhance privacy and reduce your online exposure in this hands-on workshop.

• YouTube
• 30 minutes
• On-Demand
• Free Video

No Spook Leaves Randomness to Chance - Cryptographic Random Number Generator Vulnerabilities and Standards

Uncover vulnerabilities in cryptographic random number generators and explore how adversaries subtly embed flaws into security standards through real CVE discoveries.

• YouTube
• 55 minutes
• On-Demand
• Free Video

Quantum Resistant Healthcare - Transitioning to Post-Quantum Cryptography in Medical Systems

Discover how healthcare systems must prepare for quantum computing threats by transitioning to post-quantum cryptography, featuring real-world examples from Siemens Healthineers.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Exploiting Shadow Data from AI Models and Embeddings

Discover how attackers extract sensitive PII and SSNs from AI systems through model inversion and embedding attacks, exposing privacy risks in LLMs and RAG workflows.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Pre-Auth RCE, Arbitrary SMS and Adjacent Attacks on 5G and 4G LTE Routers

Uncover critical security flaws in modern 4G/5G routers through firmware reverse-engineering, demonstrating RCE exploits, SMS attacks, and network compromise techniques.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Passkeys Pwned - Turning WebAuthn Against Itself

Uncover critical vulnerabilities in passkey authentication systems and learn how attackers can exploit WebAuthn API calls to forge registration and authentication responses.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Win-DoS Epidemic - Abusing RPC for Win-DoS and Win-DDoS

Discover how to exploit RPC vulnerabilities to create devastating DoS attacks against Windows domain controllers and launch DDoS botnets using public DCs in this security research presentation.

• YouTube
• 37 minutes
• On-Demand
• Free Video

How to Secure Unique Ecosystem Shipping 1 Billion+ Cores

Discover how NVIDIA secured its proprietary RISC-V ecosystem at billion-core scale with custom hardware/software architecture, novel ISA extensions, and future-proofing strategies.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Building the First Open Source Hackable Quantum Sensor

Discover how to build an open source quantum sensor using off-the-shelf parts and nitrogen-vacancy diamond to measure magnetic fields with light and explore hacking applications.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Thinking Like an Attacker Is No Longer Optional - Adversarial Mindset for Modern Cybersecurity Defense

Discover why adopting an adversarial mindset is essential for modern cybersecurity, covering red teaming, threat emulation, and defensive strategies against evolving attacks.

• YouTube
• 37 minutes
• On-Demand
• Free Video