DEFCONConference Courses

Escaping the Privacy Sandbox - Client-side Deanonymization Attacks

Uncover client-side deanonymization attacks targeting Google's Privacy Sandbox APIs, exploring vulnerabilities in Attribution Reporting and Shared Storage that compromise user privacy.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Exploiting Vulnerabilities in EV Charging Communications

Uncover critical vulnerabilities in EV charging protocols, targeting QCA 7000 Homeplug modems used in CCS and NACS systems with real-world attack demonstrations.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Building Onramps for Emergency Web Archiving in Ukraine and Beyond

Discover how to build accessible emergency web archiving systems, drawing from SUCHO's work preserving Ukrainian cultural heritage during wartime and creating sustainable digital preservation methods.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Exploiting Security Side Channels in End-to-End Encrypted Messengers

Uncover critical vulnerabilities in WhatsApp and Signal that enable stealthy user tracking and security degradation through delivery receipts and Perfect Forward Secrecy attacks.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Regex for Hackers - Using Regular Expressions for Security Testing and Bug Bounty Hunting

Master regex techniques to uncover hidden vulnerabilities, bypass security filters, and automate reconnaissance that automated tools miss in this hands-on hacking workshop.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

How Extra Features In Contactless Payments Break Security, What We Can Do

Discover how additional features in contactless payment systems create security vulnerabilities and learn practical solutions to protect against these threats.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

The Ghost of Internet Explorer in Windows

Uncover how Microsoft's MapUrlToZone API vulnerabilities allowed attackers to bypass Windows security by disguising remote files as local, leading to a dozen CVEs fixed in 2025.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Access to Secure Dependency Management Everywhere with Nix

Discover how Nix and NixOS revolutionize software deployment, eliminate vendor lock-in, and enable secure self-hosting of 120,000 Linux packages for ultimate control.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Infecting the Boot to Own the Kernel - UEFI Bootkits and Kernel-mode Rootkits

Explore UEFI bootkits and kernel rootkits construction, examining modular design, boot chain hooking, and advanced stealth capabilities with a complete framework for testing defenses.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

The Anatomy of a Crypto Scam

Uncover how crypto scammers operate through real case analysis, fund tracking, and learn essential defense strategies to protect yourself from sophisticated financial fraud schemes.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

CTRAPS - CTAP Impersonation and API Confusion Attacks on FIDO2

Uncover critical FIDO2 vulnerabilities through CTRAPS attacks that exploit CTAP protocol weaknesses, enabling credential wiping, unauthorized resets, and user tracking on popular authenticators.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Game Hacking 101

Discover fundamental game hacking concepts and security principles in video games through practical examples and hands-on techniques.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

All Your Keyboards Are Belong to Us - Keyboard Attack Vectors and Security Vulnerabilities

Explore keyboard hacking techniques from keyloggers to Van Eck phreaking, RF attacks, and acoustic eavesdropping to capture plaintext before encryption in this live tutorial.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Mac PRT Cookie Theft and Entra ID Persistence

Uncover macOS PRT cookie extraction techniques and Entra ID persistence methods, comparing Windows/macOS security controls and demonstrating novel device registration attacks.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Scamming Scammers - Weaponizing OSS Against Pig Butchering, Organized Crime

Discover how to weaponize open-source tools against $75B pig butchering scams and fight transnational crime syndicates exploiting trafficking victims through military-grade psychological ops.

• YouTube
• 54 minutes
• Self-Paced
• Free Video