DEFCONConference Courses

Securing CCTV Cameras Against Blind Spots - Analysis of Location-Based Detection Vulnerabilities

1 review

Explore how CCTV camera blind spots create security vulnerabilities through location-based confidence weakness, and learn about TipToe - a novel evasion attack demonstrating detection flaws across various conditions.

• YouTube
• 16 minutes
• On-Demand
• Free Video

Counter Deception: Defending Yourself in a World Full of Lies

1 review

Discover practical strategies to detect and defend against digital deception across network layers, from electromagnetic spoofing to false narratives, while developing critical skills to discern truth in our interconnected world.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Abusing CAN Bus Specifications for DoS Attacks in Embedded Systems

Explore CAN bus protocol vulnerabilities in automotive systems, focusing on how attackers can exploit metadata fields and protocol specifications to create denial-of-service attacks in embedded systems.

• YouTube
• 37 minutes
• On-Demand
• Free Video

The GitHub Actions Worm - Understanding CI/CD Platform Vulnerabilities

Dive into the security vulnerabilities of GitHub Actions, exploring how malicious code can spread through Action dependencies and learning essential defense strategies against CI/CD platform attacks.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Defeating VPN Always-On: Security Control Analysis and Bypass Methods

Discover security vulnerabilities in VPN Always-On implementations, exploring bypass techniques and hardening strategies for better network protection and data leak prevention.

• YouTube
• 40 minutes
• On-Demand
• Free Video

The Art of Compromising Command and Control Servers - A Web Application Vulnerabilities Perspective

Dive into techniques for exploiting command and control server vulnerabilities, uncovering infrastructure weaknesses, and exposing threat actors through common web application security flaws.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Staying Undetected Using the Windows Container Isolation Framework

Delve into Windows Container isolation mechanisms, file system separation techniques, and security implications, including methods to manipulate container frameworks for enhanced system protection.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Email Spoofing and Domain Impersonation Through Cloud Services

Dive into advanced email security exploitation techniques, learning how to bypass SPF & DMARC through Cloudflare partnerships and serverless applications for domain spoofing.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Advanced ROP Framework - Pushing Return-Oriented Programming to Its Limits

Discover advanced return-oriented programming techniques with ROP ROCKET framework, featuring syscall bypassing, cross-architecture exploitation, and innovative bad byte handling for enhanced security testing.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Digital Twinning with Extended Reality for Signal Analysis

Explore how Idaho National Labs leverages XR technologies and digital twinning to revolutionize data visualization, signal analysis, and autonomous operations in nuclear and security missions.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Abusing Windows Filtering Platform for Privilege Escalation - Undetected Attack Techniques

Discover an innovative Windows privilege escalation technique that exploits the Windows Filtering Platform, enabling stealthy system-level access through network traffic manipulation and kernel component abuse.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Civil Cyber Defense - Protecting Vulnerable Organizations Against Advanced Threats

Discover how civil cyber defenders protect vulnerable organizations, journalists, and activists using OSINT skills and open-source tools while combating human trafficking and surveillance threats.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Azure B2C Zero-Day Exploit Chain - From Public Keys to Microsoft Bug Bounty

Uncover a complete exploit chain vulnerability in Azure B2C, from cryptographic misuse to full account compromise, including novel attack methods for crypto key recovery and its impact on Microsoft's bug bounty system.

• YouTube
• 40 minutes
• On-Demand
• Free Video

A SSLippery Slope - Unraveling Hidden Dangers of Certificate Misuse

Uncover critical vulnerabilities in digital signature validation systems and learn how attackers can exploit certificate misuse to bypass security measures for signing untrusted code.

• YouTube
• 35 minutes
• On-Demand
• Free Video

When Windows Defender Updates Become a Security Risk

Dive into Windows Defender's architecture and signature update vulnerabilities, exploring how unprivileged users can exploit security flaws to compromise Windows systems and manipulate EDR functionality.

• YouTube
• 39 minutes
• On-Demand
• Free Video