DEFCONConference Courses

Encrypted Newspaper Ads in The Times: The Collinson Arctic Expedition Communication System (1850-1855)

Uncover the fascinating story of encrypted 1850s newspaper ads used to communicate with an Arctic explorer, their eventual decryption, and the innovative worldwide communication system they represented.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

The Dual-Edged Sword of EV and Solar APIs in Grid Security

Explore critical vulnerabilities in EV charging and solar system APIs, examining potential cyber threats to power grid infrastructure and the urgent need for enhanced security measures.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

MFT: Using NFTs as Attack Vectors for Command and Control

Explore how NFTs can be weaponized as attack vectors for C2 commands, featuring the mFT tool for creating malicious payloads and understanding blockchain-backed threats in cybersecurity.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Behind Enemy Lines: Going Undercover to Breach LockBit Ransomware Operations

Delve into a gripping firsthand account of infiltrating LockBit ransomware syndicate, uncovering operational tactics, leadership dynamics, and the successful unmasking of its notorious leader LockBitSupp.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Bluetooth Blues: Unmasking CVE 2023-52709 - The TI BLE5-Stack Attack

Dive into the technical analysis of CVE 2023-52709, exploring Bluetooth stack vulnerabilities, their impact on automotive security, and essential mitigation strategies for RPA generation failures.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Exploiting Voice Cloning in Adversarial Simulation - Security Testing and Defense Strategies

Explore the security vulnerabilities of voice verification systems through deep learning voice cloning techniques, including practical demonstrations, risk assessment, and defensive countermeasures.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Decoding Galah - An LLM-Powered Web Honeypot

Discover how LLM-powered honeypot Galah revolutionizes web security by dynamically simulating multiple applications and analyzing attacker behavior through intelligent HTTP response generation.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Using ALPC Security Features to Compromise RPC Services

Dive into Windows kernel security through ALPC and RPC services, exploring vulnerability exploitation techniques, security bypass methods, and system privilege escalation strategies.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

A Deep Dive into Aircraft Public Key Infrastructure and Security

Explore aircraft cybersecurity through PKI systems, from software protection to network authentication, and understand emerging quantum computing threats to aviation security.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana

Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Building a Custom ADS-B Aircraft Tracking System Using Hardware Optimization

Discover how to build a custom ADS-B aircraft tracking system using cost-effective hardware alternatives, implementing Linux and signal processing for efficient aircraft monitoring and visualization.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Breaking the Beam - Exploiting VSAT Modems from Earth

Discover groundbreaking security vulnerabilities in VSAT satellite modems through reverse engineering, exploring software stack exploits and demonstrating wireless signal injection attacks for remote access.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Ethical and Secure AI Vulnerability Disclosure - Challenges and Best Practices

Explore the complexities of AI vulnerability disclosure, focusing on ethical challenges, bias management, and security implications while examining real-world cases and solutions for responsible reporting.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

A Shadow Librarian: Fighting Back Against Encroaching Capitalism

Explore the underground resistance against digital content restrictions in public libraries, examining creative solutions to combat corporate control and ensure open access to knowledge.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

The Risk and Reward of Distributed Industrial Control - Cybersecurity in Remote Infrastructure Management

Explore the cybersecurity challenges of remotely controlled industrial assets, examining real-world incidents and practical mitigation strategies for protecting critical infrastructure operations.

• YouTube
• 27 minutes
• Self-Paced
• Free Video