DEFCONConference Courses

One Key, Two Key, I Just Stole Your goTenna Key - Exploiting Encrypted Radio Key Management Vulnerabilities

Uncover critical vulnerabilities in goTenna Pro encrypted radios where single RF packets can overwrite encryption keys, enabling man-in-the-middle attacks and network manipulation.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

So You Want to Make a Badge? Badge Creation 101

Discover the complete process of designing and creating electronic conference badges, from concept to production, with insights from a seasoned hardware security engineer.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Managing Bug Bounties at Scale

Discover how industry leaders from Amazon, PayPal, AWS, Shopify, and Splunk manage large-scale bug bounty programs, covering triage, researcher relations, and scaling strategies.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Playing Dirty Without Cheating - Getting Banned for Fun and Profit

Explore anti-cheat systems and learn innovative ways to trigger game bans without actual cheating, plus hardware ID spoofing and remote machine poisoning techniques.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Metal-as-a-Disservice - Exploiting Legacy Flaws in Cutting Edge Clouds

Uncover critical vulnerabilities in bare metal cloud environments through real-world attack demonstrations, firmware exploits, and multi-tenant compromise techniques.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Siriously Leaky - Exploring Overlooked Attack Surfaces in Apple's Ecosystem

Uncover critical zero-day vulnerabilities in Apple's trusted features like Siri, Spotlight, and Safari that bypass Face ID locks and expose sensitive data on fully updated iPhones.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Turning Your Active Directory into the Attacker's C2

Explore advanced Active Directory exploitation through Group Policy Objects, turning enterprise infrastructure into command-and-control systems for sophisticated attacks.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Securing Agentic AI Systems and Multi-Agent Workflows

Discover how to secure autonomous AI systems and multi-agent workflows through threat modeling, supply-chain defenses, and red-team strategies for emerging agentic architectures.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Stories from a Tor Dev - Operating a Global Anonymity Network

Discover real-world challenges of operating Tor's global anonymity network through firsthand stories from core developer Roger Dingledine at DEF CON 33.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Help! Linux in my Webcam! - Exploring Embedded Linux Security in Consumer Devices

Explore hidden Linux systems in webcams, uncovering supply chain vulnerabilities, firmware security flaws, and the surprising autonomy of seemingly simple devices.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Intro to Physical Security Bypass

Discover physical security bypass techniques including egress hardware exploitation, access control vulnerabilities, and door entry methods beyond lock picking.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

We Are Currently Clean on OPSEC - The Signalgate Saga

Uncover the Signalgate scandal: Trump officials' OPSEC failures, fake Signal app vulnerabilities, TeleMessage hacks, and analysis of leaked chat data from government communications.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Post Quantum Panic - When Will the Cracking Begin and Can We Detect It?

Explore quantum computing's threat to current encryption, timeline predictions, and detection strategies for cryptographically relevant quantum attacks on RSA and ECC systems.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Unmasking the Snitch Puck - IoT Surveillance Tech in the School Bathroom

Uncover IoT vape detector vulnerabilities through hardware teardown, firmware analysis, and reverse-engineering to expose surveillance tech flaws in educational environments.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Hacking Hotel Locks - The Saflok Vulnerabilities Expanded

Explore expanded vulnerabilities in Saflok hotel locks, covering handheld programmers, lock interfaces, credential bit fields, and why security-through-obscurity fails in practice.

• YouTube
• 38 minutes
• Self-Paced
• Free Video