DEFCONConference Courses

Siriously Leaky - Exploring Overlooked Attack Surfaces in Apple's Ecosystem

Uncover critical zero-day vulnerabilities in Apple's trusted features like Siri, Spotlight, and Safari that bypass Face ID locks and expose sensitive data on fully updated iPhones.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Turning Your Active Directory into the Attacker's C2

Explore advanced Active Directory exploitation through Group Policy Objects, turning enterprise infrastructure into command-and-control systems for sophisticated attacks.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Securing Agentic AI Systems and Multi-Agent Workflows

Discover how to secure autonomous AI systems and multi-agent workflows through threat modeling, supply-chain defenses, and red-team strategies for emerging agentic architectures.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Stories from a Tor Dev - Operating a Global Anonymity Network

Discover real-world challenges of operating Tor's global anonymity network through firsthand stories from core developer Roger Dingledine at DEF CON 33.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Help! Linux in my Webcam! - Exploring Embedded Linux Security in Consumer Devices

Explore hidden Linux systems in webcams, uncovering supply chain vulnerabilities, firmware security flaws, and the surprising autonomy of seemingly simple devices.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Intro to Physical Security Bypass

Discover physical security bypass techniques including egress hardware exploitation, access control vulnerabilities, and door entry methods beyond lock picking.

• YouTube
• 57 minutes
• On-Demand
• Free Video

We Are Currently Clean on OPSEC - The Signalgate Saga

Uncover the Signalgate scandal: Trump officials' OPSEC failures, fake Signal app vulnerabilities, TeleMessage hacks, and analysis of leaked chat data from government communications.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Post Quantum Panic - When Will the Cracking Begin and Can We Detect It?

Explore quantum computing's threat to current encryption, timeline predictions, and detection strategies for cryptographically relevant quantum attacks on RSA and ECC systems.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Unmasking the Snitch Puck - IoT Surveillance Tech in the School Bathroom

Uncover IoT vape detector vulnerabilities through hardware teardown, firmware analysis, and reverse-engineering to expose surveillance tech flaws in educational environments.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Hacking Hotel Locks - The Saflok Vulnerabilities Expanded

Explore expanded vulnerabilities in Saflok hotel locks, covering handheld programmers, lock interfaces, credential bit fields, and why security-through-obscurity fails in practice.

• YouTube
• 38 minutes
• On-Demand
• Free Video

The UnRightful Heir - My dMSA Is Your New Domain Admin

Discover how to exploit Microsoft's new dMSAs to escalate Active Directory privileges, even in domains not using them, through the BadSuccessor attack technique.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Finding and Exploiting Kernel Vulnerabilities in the eBPF Subsystem

Discover advanced techniques for finding and exploiting eBPF kernel vulnerabilities through state-aware fuzzing, verifier bypasses, and JIT compiler flaws for security research.

• YouTube
• 36 minutes
• On-Demand
• Free Video

DDoS - The Next Generation

Explore the evolving landscape of DDoS attacks and cutting-edge prevention strategies in this comprehensive cybersecurity presentation.

• YouTube
• 38 minutes
• On-Demand
• Free Video

How Not to IoT - Lessons in Security Failures

Uncover critical IoT security flaws through real-world examples of vulnerable devices, from WiFi credential leaks to pre-installed malware and command injection attacks.

• YouTube
• 43 minutes
• On-Demand
• Free Video

No Brain No Gain - EEG-Based Authentication for IoT Security

Explore EEG-based authentication for IoT security, using brain signals as dynamic biometric identifiers to overcome traditional digital security limitations and deepfake vulnerabilities.

• YouTube
• 57 minutes
• On-Demand
• Free Video