DEFCONConference Courses

Flipping Locks - Remote Badge Cloning with the Flipper Zero and More

Discover advanced RFID badge cloning techniques using Flipper Zero and custom hardware for remote penetration testing without direct target interaction.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Carding is Dead, Long Live Carding - NFC Relay Attacks and Malware-as-a-Service Platforms

Explore the resurgence of carding through NFC relay attacks and Malware-as-a-Service platforms targeting contactless payments with advanced fraud techniques.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Unveiling the Perils of the TorchScript Engine in PyTorch

Uncover critical security vulnerabilities in PyTorch's TorchScript engine that challenge the safety of weights_only=True, revealing RCE risks in AI applications.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Recording PCAPs from Stingrays With a $20 Hotspot

Discover how to detect cell site simulators using a $20 hotspot and Wireshark to analyze cellular traffic between phones and towers, protecting against surveillance.

• YouTube
• 40 minutes
• On-Demand
• Free Video

HTTP 1.1 Must Die! The Desync Endgame

Uncover advanced HTTP request smuggling techniques and new desync attack classes that bypass modern mitigations, featuring real-world exploits and open-source research tools.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Making a Custom Hashcat Module to Solve a Decade-Old Puzzle Challenge

Discover how to create custom Hashcat modules for cracking complex puzzles, featuring the decade-old One Bitcoin Book challenge solved through GPU-powered brute force techniques.

• YouTube
• 48 minutes
• On-Demand
• Free Video

SCCM - The Tree That Always Bears Bad Fruits

Explore SCCM security vulnerabilities and attack techniques, including 0-day exploits like CVE-2024-43468, reconnaissance methods, and post-exploitation tools for red team operations.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Emulating Embedded Linux Devices at Scale with LightTouch Firmware Rehosting

Discover advanced techniques for emulating embedded Linux systems using a higher-level rehosting approach that preserves userspace integrity while building custom kernels and QEMU machines.

• YouTube
• 38 minutes
• On-Demand
• Free Video

State of Open Source in the Federal Government

Discover the current landscape of open source adoption in federal agencies, exploring challenges, reforms, and policy strategies from a government IT insider's perspective.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Rebadged, Relabeled, Rooted - Pwnage via Solar Supply Chain

Uncover critical security vulnerabilities in residential solar systems through supply chain attacks, API exploitation, and firmware tampering techniques.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Client or Server? Hidden Sword of Damocles in Kafka

Discover the first-ever RCE vulnerability in Kafka Server and ecosystem components, exposing thousands of servers to hidden security threats in this groundbreaking research.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Red Teaming Fraud Prevention Systems with GenAI

Explore how LLMs can red team fraud prevention systems, testing resilience against innovative fraudster attacks using generative AI techniques.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Amber64 - Mining Hacker History from Over 500k Commodore 64 Disks

Discover how forensic analysis of 650,000 Commodore 64 disk images reveals hidden hacker history from the 1980s-90s through recovered deleted files and unallocated sectors.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Mastering Apple Endpoint Security for Advanced macOS Malware Detection

Unlock advanced Apple Endpoint Security features for sophisticated macOS malware detection, covering caching behaviors, authorization deadlines, mute inversions, and TCC event monitoring.

• YouTube
• 52 minutes
• On-Demand
• Free Video

TSPU - Russia's Firewall and Defending Against Digital Repression

Explore Russia's TSPU censorship system, its advanced in-path filtering capabilities, and emerging circumvention techniques to defend against digital repression.

• YouTube
• 41 minutes
• On-Demand
• Free Video