DEFCONConference Courses

Relative Path File Injection: The Next Evolution in RPO

Discover how Relative Path File Injection attacks can turn trusted websites into malware delivery platforms, exploring detection methods and real-world implementations through practical demonstrations.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

RF Attacks on Aviation's Defense Against Mid-Air Collisions

Uncover groundbreaking vulnerabilities in aviation's TCAS II collision avoidance system, exploring RF attack methods that can manipulate traffic advisories and disable critical safety features in aircraft.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Safecracking Fundamentals: Understanding Mechanical Combination Safe Locks

Master the art of mechanical safe manipulation through expert techniques, wheel isolation methods, and vulnerability analysis for Group 2 locks, enhancing your locksport knowledge.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Optical Espionage: Using Lasers to Hear Keystrokes Through Glass Windows

Discover how lasers and physics enable remote keystroke detection through windows, exploring side-channel attacks, signal interpretation, and modern espionage techniques for data extraction.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Reverse Engineering and Hacking Ecovacs Robots - Security Vulnerabilities and Privacy Concerns

Dive into the security vulnerabilities of Ecovacs robots, exploring broken encryption, unauthorized camera access, and privacy concerns while learning techniques for privacy-preserving usage and rooting.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Unraveling the Threads of USPS Smishing and Fighting Back - Reverse Engineering SMS Phishing Kits

Dive into the technical investigation of USPS-themed SMS phishing attacks, exploring vulnerability exploitation, reverse engineering techniques, and methods to combat scammer operations targeting US consumers.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Defeating EDR Evading Malware with Memory Forensics

Discover advanced memory forensics techniques to detect and analyze EDR-evading malware, including system call manipulation, module overwriting, and debug register abuse.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Breaching AWS Through Shadow Resources - Critical Vulnerabilities and Security Implications

Uncover critical AWS vulnerabilities and security insights through real-world examples of shadow resource exploitation, featuring detection methods, privilege escalation techniques, and best practices for cloud security.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Outlook Unleashing RCE Chaos: Exploiting CVE-2024-30103

Dive into the critical Outlook security vulnerabilities, exploring remote code execution exploits through COM objects, NTLM leaks, and essential mitigation strategies for enterprise protection.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

MoWireless MoProblems: Modular Wireless Survey System and Data Analytics with PacketGlass

Discover how to build and implement a modular wireless survey system using PacketGlass for efficient collection, visualization, and analysis of massive wireless network data through Elastic-based analytics.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Famous and Not So Famous Unsolved Codes and Ciphers Throughout History

Explore fascinating unsolved codes and ciphers throughout history, from CIA's Kryptos sculpture to mysterious WWII pigeon messages and encrypted postcards from notable figures.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Exposing Attacks Hiding in the Sheer Noise of False Positives - Using Data Science for Security Operations

Discover how data science transforms overwhelming security data into actionable insights, helping identify coordinated attacks amid false positives using open-source models and security knowledge encoding.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Navigating the Turbulent Skies of Aviation Cyber Regulation

Dive into the complex landscape of aviation cybersecurity policy, exploring technical challenges and regulatory frameworks shaping the future of civil aviation safety across the US and Europe.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Human Dignity in AI and Tech Policy

Explore the critical intersection of human dignity, AI, and tech policy, examining how data-driven technologies impact individual rights and societal freedoms while discussing protective measures and solutions.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Breaking Boundaries: Popping Shells in Airgapped Systems with Arduino - BadUSB Exploitation

Discover how to bypass airgapped systems and execute wireless payloads using affordable Arduino hardware and basic coding techniques for penetration testing medical devices.

• YouTube
• 24 minutes
• Self-Paced
• Free Video