DEFCONConference Courses

7 Vulns in 7 Days - Breaking Bloatware Faster Than It's Built

Discover how bloatware vulnerabilities led to 7 CVEs in 7 days, exposing privileged service flaws that enable browser-to-system exploitation across major vendors.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

SSH Honeypots and Walkthrough Workshops - A History

Explore the evolution of SSH honeypots from DEF CON 24's puzzle to advanced Cowrie-based challenges featuring custom commands, adventure games, and innovative terminal interactions.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

How Malicious Packages on npm Bypass Existing Security Tools

Uncover how threat actors exploit npm's 5 million packages to deliver malware and why traditional security tools like SCA, SAST, and EDR fail to detect these npm-based attacks.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Not Just a Pipeline Leak - Reconstructing Real Attack Behind tj-actions

Uncover the sophisticated supply chain attack behind the tj-actions incident, revealing how attackers weaponized open-source trust to target Coinbase through lateral movement.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Fingerprint-Based Bot Blocking and Dynamic Deception

Discover how to build a self-evolving firewall using TLS/HTTP fingerprints and AI to block bots and create dynamic deception traps that adapt in real-time.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Hacking Context for Auto Root Cause and Attack Flow Discovery

Discover lightweight, LLM-free techniques for contextualizing IoT alerts and building causality sequences to identify root causes and attack flows in resource-constrained environments.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Free Video

Cash, Drugs, and Guns - Why Your Safes Aren't Safe

Discover critical vulnerabilities in SecuRam safe locks used by Liberty Safe and major retailers, revealing how UL-certified electronic locks can be cracked in seconds using a Raspberry Pi.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Invoking Gemini Agents with a Google Calendar Invite

Uncover how attackers exploit Gemini agents through calendar invites, demonstrating 15 hijacking techniques that enable toxic content generation, device control, and data exfiltration.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Preventing One of The Largest Supply-Chain Attacks in History

Discover how abandoned AWS S3 buckets could enable massive supply-chain attacks affecting thousands of organizations worldwide and learn prevention strategies.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Kill Chain Reloaded - Abuse Legacy Paths for Stealth Persistence

Discover advanced Red Team techniques for bypassing EDR solutions through physical memory access and achieving kernel-mode execution with stealthy persistence methods.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Private, Private, Private - Access Everywhere

Discover OSINT techniques to assess your digital footprint and learn obfuscation methods to enhance privacy and reduce your online exposure in this hands-on workshop.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

No Spook Leaves Randomness to Chance - Cryptographic Random Number Generator Vulnerabilities and Standards

Uncover vulnerabilities in cryptographic random number generators and explore how adversaries subtly embed flaws into security standards through real CVE discoveries.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Quantum Resistant Healthcare - Transitioning to Post-Quantum Cryptography in Medical Systems

Discover how healthcare systems must prepare for quantum computing threats by transitioning to post-quantum cryptography, featuring real-world examples from Siemens Healthineers.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Exploiting Shadow Data from AI Models and Embeddings

Discover how attackers extract sensitive PII and SSNs from AI systems through model inversion and embedding attacks, exposing privacy risks in LLMs and RAG workflows.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Pre-Auth RCE, Arbitrary SMS and Adjacent Attacks on 5G and 4G LTE Routers

Uncover critical security flaws in modern 4G/5G routers through firmware reverse-engineering, demonstrating RCE exploits, SMS attacks, and network compromise techniques.

• YouTube
• 27 minutes
• Self-Paced
• Free Video