Security Courses

DEFCONConference

Abusing OIDC Authentication for Cloud Security Vulnerabilities

Dive into OIDC security vulnerabilities, exploring authentication mechanisms, potential misconfigurations, and real-world attack vectors in cloud environments through CI/CD workflows and identity providers.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

DEFCONConference

Xiaomi Mobile Security Vulnerabilities - Regional Exploit Analysis and Pwn2Own Competition

Delve into the behind-the-scenes journey of exploiting Xiaomi 13 Pro at Pwn2Own Toronto 2023, exploring regional security variations and the challenges of mobile device exploitation.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

DEFCONConference

Detecting Persistent Threats on Draytek Devices - Security Assessment and Mitigation Tools

Discover how to detect and mitigate persistent threats on Draytek devices through firmware analysis, reverse engineering, and custom security module development for enhanced network protection.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

DEFCONConference

RFID 101: Understanding Badge Systems, Readers, and Security Exploits

Discover the fundamentals of RFID technology, badge cloning, and security system vulnerabilities using tools like Proxmark and Flipper, while learning practical wireless communication hacking techniques.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

DEFCONConference

Speed Bumps and Speed Hacks - Adventures in Car Manufacturing Security

Dive into critical security vulnerabilities affecting major car manufacturers' web applications, exploring real-world attacks, impact chains, and the importance of responsible disclosure policies.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

DEFCONConference

The Immortal Retrofuturism of Mainframes and Their Security - Modern Applications and Protection

Explore the enduring relevance of mainframe technology, its modern applications, and essential security measures for protecting these powerful computing systems in today's digital landscape.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

DEFCONConference

Inside Llama 3 Red Team Process - AI Safety and Security Assessment

Delve into Meta's AI Red Team's comprehensive approach to testing Llama 3's safety, exploring methodologies, automated attacks, and emerging security challenges in AI systems.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

DEFCONConference

Sneaky Extensions - Bypassing MV3 Security in Browser Extensions

Discover how browser extensions can exploit security vulnerabilities in MV3, including webcam hijacking, credential theft, and arbitrary code execution, while learning protective measures against these threats.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

DEFCONConference

Unexpected Exposures in the Secure Shell - SSH Security Testing and Research

Delve into SSH security vulnerabilities, implementation challenges, and exploitation techniques across various platforms, featuring the new open-source testing tool 'sshamble'.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

DEFCONConference

Reverse Engineering and Hacking Ecovacs Robots - Security Vulnerabilities and Privacy Concerns

Dive into the security vulnerabilities of Ecovacs robots, exploring broken encryption, unauthorized camera access, and privacy concerns while learning techniques for privacy-preserving usage and rooting.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

DEFCONConference

Breaching AWS Through Shadow Resources - Critical Vulnerabilities and Security Implications

Uncover critical AWS vulnerabilities and security insights through real-world examples of shadow resource exploitation, featuring detection methods, privilege escalation techniques, and best practices for cloud security.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

DEFCONConference

Exposing Attacks Hiding in the Sheer Noise of False Positives - Using Data Science for Security Operations

Discover how data science transforms overwhelming security data into actionable insights, helping identify coordinated attacks amid false positives using open-source models and security knowledge encoding.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

DEFCONConference

The Evolution of Cryptography - From Classical Methods to Modern Data Security

Explore the historical evolution of cryptographic terminology, from classical definitions to modern usage, while examining the crucial balance between data security and privacy protection.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

DEFCONConference

Leveraging Private APNs for Mobile Network Traffic Analysis and Security

Discover how to monitor and control mobile device network traffic using private APNs, enabling affordable security testing and traffic analysis for IoT and mobile devices on 4G/5G networks.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

DEFCONConference

MobileMesh RF Network Exploitation - Security Analysis and Vulnerabilities in goTenna Networks

Uncover security vulnerabilities in goTenna Pro radio's mesh network encryption, including tracking, interception, and message injection methods, with practical demonstrations and mitigation strategies.

• YouTube
• 43 minutes
• Self-Paced
• Free Video