DEFCONConference Courses

Cyber Volunteering and Community Defense - 1 Year In

Discover how hackers and technologists protect communities through cyber volunteering, ransomware response, and grassroots defense initiatives in this DEF CON update.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Breaking Wi-Fi Easy Connect - A Security Analysis of DPP

Uncover critical security vulnerabilities in Wi-Fi Easy Connect protocol through comprehensive analysis revealing how usability enhancements can compromise network security.

• YouTube
• 41 minutes
• On-Demand
• Free Video

AppleStorm - Unmasking the Privacy Risks of Apple Intelligence

Uncover the hidden privacy risks and data flows within Apple Intelligence through traffic analysis and OS inspection techniques, challenging Apple's security claims.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Third Party Access Granted - Postmortem on Student Privacy

Explore student data privacy vulnerabilities and third-party access risks in higher education systems through real-world case analysis and security insights.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Remote Code Execution via MIDI Messages

Discover how to exploit MIDI protocol vulnerabilities in Yamaha keyboards through hardware reverse engineering, JTAG, UART, and firmware analysis to achieve remote code execution.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Satellite Networks Under Siege - Cybersecurity Challenges of Targeted DDoS Attacks

Explore satellite network vulnerabilities and DDoS attack methodologies targeting Low Earth Orbit constellations, plus defensive countermeasures for critical space communications.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Secure Code Is Critical Infrastructure - Hacking Policy for Public Good

Discover how secure coding practices can be leveraged as critical infrastructure to influence policy changes and create positive societal impact through cybersecurity advocacy.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Man in the Malware - Intercepting Adversarial Communications

Discover how a threat actor's OPSEC mistake exposed their entire cybercrime operation through intercepted Telegram C2 communications, revealing malware tactics and infrastructure mapping.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Kill List - Hacking an Assassination Site on the Dark Web

Discover how security researchers exposed a dark web assassination marketplace, intercepted murder orders, and collaborated with global law enforcement to prevent killings and secure convictions.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Letthemin - Facilitating High Value Purple Teams Using Assumed Compromise

Master a refined methodology for Purple Team engagements using Assumed Compromise approach to enhance detection capabilities and organizational cyber resilience.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Firmware Decryption - For, and By, the Cryptographically Illiterate

Discover how to decrypt embedded device firmware using practical techniques, even without deep cryptographic knowledge or specialized hardware access.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Take All My Money - Penetrating ATMs

Discover real-world ATM hacking techniques, penetration testing war stories, and cybersecurity vulnerabilities that can make machines dispense cash unexpectedly.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Escaping the Privacy Sandbox with Client Side Deanonymization Attacks

Uncover client-side deanonymization attacks that exploit Google's Privacy Sandbox APIs, revealing how debugging reports, destination hijacking, and storage vulnerabilities can compromise user privacy.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Inside Look at a Chinese Operational Relay Network

Uncover how Chinese hackers build private relay networks to hide their tracks, exposing their tools, techniques, and infrastructure through detailed forensic analysis.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Locked Down, Not Locked Out - How I Escaped Your Secure Operator Workstation

Discover how to exploit and defend against common vulnerabilities in "locked down" operator workstations through real-world penetration testing scenarios and practical hardening techniques.

• YouTube
• 25 minutes
• On-Demand
• Free Video