DEFCONConference Courses

Manufacturing Cybersecurity: Lessons Learned and Taught from Ransomware Attacks

Delve into manufacturing cybersecurity challenges, focusing on ransomware threats, network vulnerabilities, and automation risks while exploring protective strategies for operational technology environments.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Hacking Apple's USB-C Controller: From JTAG Access to Code Execution on iPhone 15

Dive into advanced hardware hacking techniques to exploit Apple's ACE3 USB-C controller, using reverse engineering, side-channel analysis, and fault injection to gain code execution access on iPhone 15.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Hi-Intensity Deconstruction: Chronicles of a Cryptographic Heist

Delve into groundbreaking research revealing security vulnerabilities in HID's iCLASS SE platform, exploring reverse engineering techniques and critical mitigation strategies for electronic access control systems.

• YouTube
• 1 hour 17 minutes
• Self-Paced
• Free Video

Understanding Authentication Bypass Vulnerabilities in Industrial VPN Gateways

Dive into industrial VPN gateway vulnerabilities through detailed analysis of security flaws, session hijacking risks, and hardware security bypass techniques in remote access systems.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

National Labs Use of Extended Reality for Security and Training Applications

Explore how Pacific Northwest National Lab leverages XR technology for virtual twins, hazardous environment simulations, and security threat communications in national security operations.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Access Control System Implementation Best Practices and Security Guidelines

Master essential best practices for implementing secure physical access control systems, from tamper-resistant wiring to clone-proof badges and controller equipment management.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

The Missing Link: How to Collect and Leverage Software Bill of Materials (SBOMs)

Discover how Schneider Electric efficiently manages software security through SBOM collection and implementation, with real-world examples from Log4j and OpenSSL vulnerability responses.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Introduction to IPv6 - Understanding Modern Internet Protocols

Dive into the evolution of Internet protocols, from IPv4 to IPv6, understanding core networking concepts and security implications for modern infrastructure deployment.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Atomic Honeypot - A MySQL Honeypot That Drops Shells

Discover how a weaponized MySQL honeypot server exploits vulnerabilities to counter-attack malicious clients, featuring innovative use of CVE-2023-21980 and CVE-2024-21096 for defensive security research.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Measuring the Tor Network - Understanding Network Health and Security Analysis

Dive into the mechanics of Tor's network infrastructure, exploring metrics collection, attack mitigation, and community management strategies for maintaining this vital privacy ecosystem.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Ethical and Secure AI Vulnerability Disclosure - Challenges and Best Practices

Explore the complexities of AI vulnerability disclosure, examining ethical challenges, bias concerns, and security implications while learning practical approaches to responsible vulnerability management.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Regenerating Passwords from RoboForm's Password Generator - A Time-Based Attack

Delve into reverse engineering RoboForm's password generator vulnerability, exploring techniques to regenerate historical passwords and recover locked Bitcoin wallets through systematic analysis.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Inside the FBI's Secret Encrypted Phone Company Anom - The Dark Wire Investigation

Uncover the fascinating story behind Anom, the FBI-run encrypted phone network that infiltrated criminal organizations, exploring technical details, operational challenges, and surveillance implications.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Creating Custom Electronic Conference Badges - A Guide to OpenTaxus Design

Learn to design and customize electronic conference badges using OpenTaxus - from hardware modifications in KiCAD to software changes in CircuitPython, plus cost management and production logistics.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

The Rise and Fall of Binary Exploitation - A Technical Analysis of Memory Safety and Exploit Mitigations

Explore the evolution of binary exploitation, memory safety challenges, and modern protection mechanisms in operating systems, focusing on Windows security mitigations and their effectiveness.

• YouTube
• 48 minutes
• Self-Paced
• Free Video